entra-agent-id

原文涵盖的主题

• Microsoft Entra Agent ID
• Quick Reference
• When to Use This Skill
• MCP Tools
• Before You Start
• Conceptual Model
• Prerequisites
• Required Entra Roles

Create and manage OAuth 2.0-capable identities for AI agents using Microsoft Graph. Every agent instance gets a distinct identity, audit trail, and independently-scoped permission grants. | Property | Value | |----------|-------| | Service | Microsoft Entra Agent ID | | API | Microsoft Graph (https://graph.microsoft.com/v1.0) | | Required role | Agent Identity Developer, Agent Identity Administrator, or Application Administrator | | Object model | Blueprint (application) → BlueprintPrincipal (SP) → Agent Identity (SP) | | Runtime exchange | Two-step fmipath exchange (autonomous and OBO) | | .NET helper | Microsoft.Identity.Web.AgentIdentities | | Polyglot helper | Microsoft Entra SDK for AgentID (sidecar container) | Provisioning a new Agent Identity Blueprint and BlueprintPrincipal Creating per-instance Agent Identities under a Blueprint Configuring credentials (FIC, Managed Identity, or client secret) on the Blueprint Implementing the two-step fmipath runtime token exchange (autonomous or OBO) Cross-tenant agent token flows Deploying the Microsoft Entra SDK for AgentID sidecar for polyglot agents (Python, Node, Go, Java) Granting per-Agent-Identity application (appRoleAssignments

这里只展示节选，请以完整原文和当前要求为准。