Community생산성 & 협업github.com

microsoft/entra-agent-id

Microsoft Entra Agent Identity 청사진, BlueprintPrincipal, 인스턴스별 Agent Identity를 Microsoft Graph로 프로비저닝하고, OAuth 2.0 토큰 교환(fmi_path, OBO, 크로스 테넌트)을 구성합니다. Microsoft Entra SDK for AgentID 사이드카를 포함합니다.

entra-agent-id란 무엇인가요?

이 스킬은 Microsoft Entra Agent Identity 청사진(Blueprint), BlueprintPrincipal, 인스턴스별 Agent Identity를 Microsoft Graph API를 통해 프로비저닝하고 관리하는 기능을 제공합니다. 주요 사용 사례로는 OAuth 2.0 토큰 교환(fmi_path, OBO, 크로스 테넌트 시나리오) 구성, Workload Identity Federation을 통한 에이전트 인증, polyglot 에이전트 인증, 그리고 Microsoft.Identity.Web.AgentIdentities 라이브러리와의 통합이 포함됩니다. 이 스킬은 AI 에이전트(예: Cursor, Codex)용 Entra ID 기반 정체성 관리에 특화되어 있으며, 표준 Entra 앱 등록이나 Azure RBAC 관리에는 사용하지 않아야 합니다. 지원 플랫폼은 Microsoft Graph SDK, Azure CLI, PowerShell 등이며, AgentID 사이드카 구성까지 포함하여 엔드투엔드 에이전트 인증 인프라를 자동화합니다.

지원 대상~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/microsoft/azure-skills/tree/main/skills/entra-agent-id

Installed? Explore more 생산성 & 협업 skills: steipete/gemini, steipete/gh-issues, steipete/skill-creator · View all 6 →

즐겨 사용하는 AI에게 물어보기

이 에이전트 스킬이 미리 로드된 새 채팅을 엽니다.

문서

entra-agent-id은(는) 무엇을 하나요?

Microsoft Entra Agent Identity 청사진(Blueprint), BlueprintPrincipal, 인스턴스별 Agent Identity를 Microsoft Graph로 프로비저닝하고, OAuth 2.0 토큰 교환(fmi_path, OBO, 크로스 테넌트)을 구성합니다. Microsoft Entra SDK for AgentID 사이드카를 포함합니다.

사용 대상: Agent Identity Blueprint, BlueprintPrincipal, 에이전트 OAuth, fmi_path 토큰 교환, 에이전트 OBO, 에이전트용 Workload Identity Federation, 다중 언어 에이전트 인증, Microsoft.Identity.Web.AgentIdentities.

사용 금지: 표준 Entra 앱 등록(entra-app-registration 사용), Azure RBAC(azure-rbac 사용), Microsoft Foundry 에이전트 작성(microsoft-foundry 사용).

Individual skills in this repo

This repo contains 20 individual skills — each has its own dedicated page.

microsoft/airunway-aks-setup

Agent skill 'airunway-aks-setup' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/appinsights-instrumentation

Agent skill 'appinsights-instrumentation' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-ai

Agent skill 'azure-ai' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-aigateway

Agent skill 'azure-aigateway' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-app-onboard

Agent skill 'azure-app-onboard' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-app-onboard-prereq

Assess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work. Evaluates build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Answers questions about what your app needs before it can be deployed — frameworks, dependencies, and configuration. Checks whether dependencies are compatible and identifies deployment blockers and unsupported frameworks. WHEN: \"evaluate my repo\", \"is my app ready to deploy\", \"what does my app need to deploy\", \"what do I need before deploying\", \"does my app need\", \"can I ship this to Azure\", \"scan my repo for issues\", \"is this app deployable\", \"check if my app is ready for Azure\", \"do I need a Dockerfile\", \"what's blocking my deployment\", \"are there any blockers\", \"are my dependencies compatible\", \"does Azure support my framework\", \"what needs to change before deploying\", \"check my app configuration\".

microsoft/azure-cloud-migrate

Agent skill 'azure-cloud-migrate' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-compliance

Agent skill 'azure-compliance' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-compute

Agent skill 'azure-compute' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-cost

Agent skill 'azure-cost' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-cost-optimization

Identify Azure cost savings from usage and spending data. USE FOR: optimize Azure costs, reduce Azure spending/expenses, analyze Azure costs, find cost savings, generate cost optimization report, identify orphaned resources to delete, rightsize VMs, reduce waste, optimize Redis costs, optimize storage costs, AKS cost analysis add-on, namespace cost, cost spike, anomaly, budget alert, AKS cost visibility. DO NOT USE FOR: deploying resources (use azure-deploy), general Azure diagnostics (use azure-diagnostics), security issues (use azure-security)

microsoft/azure-deploy

Agent skill 'azure-deploy' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-diagnostics

Agent skill 'azure-diagnostics' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-enterprise-infra-planner

Agent skill 'azure-enterprise-infra-planner' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-hosted-copilot-sdk

Build, deploy, and modify GitHub Copilot SDK apps on Azure. MANDATORY when codebase contains @github/copilot-sdk or CopilotClient in package.json. PREFER OVER azure-prepare when copilot-sdk markers detected. WHEN: copilot SDK, @github/copilot-sdk, copilot-powered app, build copilot app, prepare copilot app, add feature to copilot app, modify copilot app, BYOM, bring your own model, CopilotClient, createSession, sendAndWait, azd init copilot. DO NOT USE FOR: deploying already-prepared copilot-sdk apps (use azure-deploy), general web apps without copilot SDK (use azure-prepare), Copilot Extensions, Foundry agents (use microsoft-foundry).

microsoft/azure-kubernetes

Agent skill 'azure-kubernetes' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-kusto

Agent skill 'azure-kusto' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-messaging

Agent skill 'azure-messaging' from microsoft/azure-skills. Use when the task matches this skill's domain.

microsoft/azure-observability

Azure Observability Services including Azure Monitor, Application Insights, Log Analytics, Alerts, and Workbooks. Provides metrics, APM, distributed tracing, KQL queries, and interactive reports. USE FOR: Azure Monitor, Application Insights, Log Analytics, Alerts, Workbooks, metrics, APM, distributed tracing, KQL queries, interactive reports, observability, monitoring dashboards. DO NOT USE FOR: instrumenting apps with App Insights SDK (use appinsights-instrumentation), querying Kusto/ADX clusters (use azure-kusto), cost analysis (use azure-cost-optimization).

microsoft/azure-postgres

azure-postgres — an installable skill for AI agents.

관련 스킬