通过 Microsoft Graph 预配 Microsoft Entra 代理身份蓝图、BlueprintPrincipal 和实例级代理身份，并配置 OAuth 2.0 令牌交换（fmi_path、OBO、跨租户），包括用于 AgentID 边车的 Microsoft Entra SDK。
此技能用于管理 Microsoft Entra 中的代理身份生命周期，提供身份蓝图、BlueprintPrincipal 和实例级代理身份的预配功能。它通过 Microsoft Graph API 实现自动化的令牌交换配置，支持 fmi_path、OBO（On-Behhalf-Of）和跨租户场景。该技能还集成了 Microsoft.Identity.Web.AgentIdentities 库，可用于构建支持多语言代理认证、工作负载身份联合和 OAuth 2.0 的 AI 代理系统。适用于 Agent Identity Blueprint、BlueprintPrincipal、agent OAuth、fmi_path 令牌交换、agent OBO、工作负载身份联合等场景。不支持标准 Entra 应用注册、Azure RBAC 或 Microsoft Foundry 代理创作，这些场景应使用其他专用技能。
npx skills add https://github.com/microsoft/azure-skills/tree/main/skills/entra-agent-idInstalled? Explore more 生产力与协作 skills: steipete/gemini, steipete/gh-issues, steipete/skill-creator · View all 6 →
通过 Microsoft Graph 预配 Microsoft Entra 代理身份蓝图、BlueprintPrincipal 和实例级代理身份，并配置 OAuth 2.0 令牌交换（fmi_path、OBO、跨租户），包括用于 AgentID 边车的 Microsoft Entra SDK。
适用场景： Agent Identity Blueprint、BlueprintPrincipal、agent OAuth、fmi_path 令牌交换、agent OBO、工作负载身份联合（Workload Identity Federation）用于代理、多语言代理认证（polyglot agent auth）、Microsoft.Identity.Web.AgentIdentities。
不适用场景： 标准 Entra 应用注册（请使用 entra-app-registration）、Azure RBAC（请使用 azure-rbac）、Microsoft Foundry 代理创作（请使用 microsoft-foundry）。
This repo contains 20 individual skills — each has its own dedicated page.
Agent skill 'airunway-aks-setup' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'appinsights-instrumentation' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-ai' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-aigateway' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-app-onboard' from microsoft/azure-skills. Use when the task matches this skill's domain.
Assess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work. Evaluates build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Answers questions about what your app needs before it can be deployed — frameworks, dependencies, and configuration. Checks whether dependencies are compatible and identifies deployment blockers and unsupported frameworks. WHEN: \"evaluate my repo\", \"is my app ready to deploy\", \"what does my app need to deploy\", \"what do I need before deploying\", \"does my app need\", \"can I ship this to Azure\", \"scan my repo for issues\", \"is this app deployable\", \"check if my app is ready for Azure\", \"do I need a Dockerfile\", \"what's blocking my deployment\", \"are there any blockers\", \"are my dependencies compatible\", \"does Azure support my framework\", \"what needs to change before deploying\", \"check my app configuration\".
Agent skill 'azure-cloud-migrate' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-compliance' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-compute' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-cost' from microsoft/azure-skills. Use when the task matches this skill's domain.
Identify Azure cost savings from usage and spending data. USE FOR: optimize Azure costs, reduce Azure spending/expenses, analyze Azure costs, find cost savings, generate cost optimization report, identify orphaned resources to delete, rightsize VMs, reduce waste, optimize Redis costs, optimize storage costs, AKS cost analysis add-on, namespace cost, cost spike, anomaly, budget alert, AKS cost visibility. DO NOT USE FOR: deploying resources (use azure-deploy), general Azure diagnostics (use azure-diagnostics), security issues (use azure-security)
Agent skill 'azure-deploy' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-diagnostics' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-enterprise-infra-planner' from microsoft/azure-skills. Use when the task matches this skill's domain.
Build, deploy, and modify GitHub Copilot SDK apps on Azure. MANDATORY when codebase contains @github/copilot-sdk or CopilotClient in package.json. PREFER OVER azure-prepare when copilot-sdk markers detected. WHEN: copilot SDK, @github/copilot-sdk, copilot-powered app, build copilot app, prepare copilot app, add feature to copilot app, modify copilot app, BYOM, bring your own model, CopilotClient, createSession, sendAndWait, azd init copilot. DO NOT USE FOR: deploying already-prepared copilot-sdk apps (use azure-deploy), general web apps without copilot SDK (use azure-prepare), Copilot Extensions, Foundry agents (use microsoft-foundry).
Agent skill 'azure-kubernetes' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-kusto' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-messaging' from microsoft/azure-skills. Use when the task matches this skill's domain.
Azure Observability Services including Azure Monitor, Application Insights, Log Analytics, Alerts, and Workbooks. Provides metrics, APM, distributed tracing, KQL queries, and interactive reports. USE FOR: Azure Monitor, Application Insights, Log Analytics, Alerts, Workbooks, metrics, APM, distributed tracing, KQL queries, interactive reports, observability, monitoring dashboards. DO NOT USE FOR: instrumenting apps with App Insights SDK (use appinsights-instrumentation), querying Kusto/ADX clusters (use azure-kusto), cost analysis (use azure-cost-optimization).
azure-postgres — an installable skill for AI agents.
Gemini CLI one-shot prompts, summaries, generation, skills, hooks, MCP, or Gemma routing.
Fetch GitHub issues, select candidates, spawn background fix agents, open PRs, and optionally process PR review comments.
Create, edit, audit, tidy, validate, or restructure AgentSkills and SKILL.md files.
Search, install, update, sync, or publish agent skills with the ClawHub CLI and registry.
Delegate coding work to Codex, Claude Code, or OpenCode as background workers; not simple edits or read-only code lookup.
List, configure, authenticate, call, and inspect MCP servers/tools with mcporter over HTTP or stdio.