SKILL

entra-agent-id

Microsoft Entra Agent ID（预览版），用于通过 Microsoft Graph beta API 创建支持 OAuth2 的 AI 智能体身份。涵盖智能体身份蓝图、BlueprintPrincipals、智能体身份、所需权限、赞助者和工作负载身份联合。包含用于 AgentID 的 Microsoft Entra SDK（容器化边车），用于多语言智能体身份验证（Docker/Kubernetes）、3P 智能体集成、自主和交互式智能体模式。触发词：“agent identity”、“agent id”、“Agent Identity Blueprint”、“BlueprintPrincipal”、“entra agent”、“agent identity provisioning”、“Graph agent identity”、“entra sidecar”、“agent id sidecar”、“auth sidecar”、“3P agent”、“third-party agent identity”、“polyglot agent auth”。

机器翻译

查看英文原文

Microsoft Entra Agent ID (preview) for creating OAuth2-capable AI agent identities via Microsoft Graph beta API. Covers Agent Identity Blueprints, BlueprintPrincipals, Agent Identities, required permissions, sponsors, and Workload Identity Federation. Includes Microsoft Entra SDK for AgentID (containerized sidecar) for polyglot agent authentication (Docker/Kubernetes), 3P agent integration, autonomous and interactive agent patterns. Triggers: "agent identity", "agent id", "Agent Identity Blueprint", "BlueprintPrincipal", "entra agent", "agent identity provisioning", "Graph agent identity", "entra sidecar", "agent id sidecar", "auth sidecar", "3P agent", "third-party agent identity", "polyglot agent auth".

适用对象：软件开发与测试。自动收录 · 待核查。

原作者说明节选

从固定版本的 SKILL.md 提取，保留原文语言。以下内容属于作者说明，本站尚未验证安装、兼容或运行结果。

查看英文原文

原文涵盖的主题

Microsoft Entra Agent ID
Before You Start
Conceptual Model
Prerequisites
PowerShell (recommended for interactive setup)
Python (for programmatic provisioning)
Required Entra Roles
Environment Variables

Create and manage OAuth2-capable identities for AI agents using Microsoft Graph beta API. Preview API — All Agent Identity endpoints are under /beta only. Not available in /v1.0. Search microsoft-docs MCP for the latest Agent ID documentation: Query: "Microsoft Entra agent identity setup" Verify: API parameters match current preview behavior One of: Agent Identity Developer, Agent Identity Administrator, or Application Administrator. ⚠️ DefaultAzureCredential is NOT supported. Azure CLI tokens contain Directory.AccessAsUser.All, which Agent Identity APIs explicitly reject (403). You MUST use a dedicated app registration with clientcredentials flow or connect via Connect-MgGraph with explicit delegated scopes. Sponsors are required and must be User objects — ServicePrincipals and Groups are rejected. This step is mandatory. Creating a Blueprint does NOT auto-create its service principal. Without this, Agent Identity creation fails with: 400: The Agent Blueprint Principal for the Agent Blueprint does not exist. If implementing idempotent scripts, check for and create the BlueprintPrincipal even when the Blueprint already exists (a previous run may have created the Blueprint but crash

这里只展示节选，请以完整原文和当前要求为准。

来源仓库: microsoft/skills
源文件: .github/skills/entra-agent-id/SKILL.md
固定版本: 9287b443662d2433c85621c7325ee72a0ce499b5

阅读完整原作者说明 ↗

来源与内容状态

本条为自动发现的元数据，尚未完成人工文档核查；适用性与运行结果待核查。

原作者：Microsoft Skills · 原作者仓库元数据。文档核查：未核查。最近来源检查：2026-11-10T19:02:08.061Z。

分类由名称、说明与路径规则生成，分类不代表已核实适配。

许可与权利归属

MIT。第三方内容及版权归原作者，使用条件以原文为准。

许可原文 ↗

本站没有因同步、复制或用户自报成功而将资源标为运行验证通过。

原作者项目 ↗原始使用说明 ↗

限制与注意事项

元数据收录不代表本站已经安装、适配、实测或进行安全审查。