透過 Microsoft Graph 佈建 Microsoft Entra 代理身分藍圖、BlueprintPrincipal 及每個執行個體的代理身分，並設定 OAuth 2.0 權杖交換（fmi_path、OBO、跨租使用者），包括適用於 AgentID Sidecar 的 Microsoft Entra SDK。
此技能專注於為 AI 代理程式建立和管理 Microsoft Entra 中的代理身分識別。它使用 Microsoft Graph API 來佈建代理身分藍圖（Blueprint）、BlueprintPrincipal 以及每個執行個體的具體代理身分。技能的核心功能包括設定 OAuth 2.0 權杖交換機制，例如 fmi_path（受控識別路徑）、代理程式代理（OBO）和跨租使用者案例。它還整合了 Microsoft.Identity.Web.AgentIdentities SDK 和 AgentID 側車（sidecar），以支援在非同步代理工作流程中進行安全的權杖擷取。此技能用於需要工作負載身分識別聯盟、多語言代理程式驗證及代理程式 OAuth 流程的場景，但明確區分於標準 Entra 應用程式註冊、Azure RBAC 或 Microsoft Foundry 代理作者設定。它適合在 Claude Code、Cursor 或 Codex 等平台上自動化代理程式的身分識別生命週期管理。
npx skills add https://github.com/microsoft/azure-skills/tree/main/skills/entra-agent-idInstalled? Explore more 生產力與協作 skills: steipete/gemini, steipete/gh-issues, steipete/skill-creator · View all 6 →
透過 Microsoft Graph 佈建 Microsoft Entra 代理身分藍圖、BlueprintPrincipal 及每個執行個體的代理身分，並設定 OAuth 2.0 權杖交換（fmi_path、OBO、跨租使用者），包括適用於 AgentID Sidecar 的 Microsoft Entra SDK。
適用於： 代理身分藍圖、BlueprintPrincipal、代理 OAuth、fmi_path 權杖交換、代理 OBO、代理工作負載身分識別聯盟、多語言代理驗證、Microsoft.Identity.Web.AgentIdentities。
請勿用於： 標準 Entra 應用程式註冊（請使用 entra-app-registration）、Azure RBAC（請使用 azure-rbac）、Microsoft Foundry 代理作者設定（請使用 microsoft-foundry）。
This repo contains 20 individual skills — each has its own dedicated page.
Agent skill 'airunway-aks-setup' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'appinsights-instrumentation' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-ai' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-aigateway' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-app-onboard' from microsoft/azure-skills. Use when the task matches this skill's domain.
Assess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work. Evaluates build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Answers questions about what your app needs before it can be deployed — frameworks, dependencies, and configuration. Checks whether dependencies are compatible and identifies deployment blockers and unsupported frameworks. WHEN: \"evaluate my repo\", \"is my app ready to deploy\", \"what does my app need to deploy\", \"what do I need before deploying\", \"does my app need\", \"can I ship this to Azure\", \"scan my repo for issues\", \"is this app deployable\", \"check if my app is ready for Azure\", \"do I need a Dockerfile\", \"what's blocking my deployment\", \"are there any blockers\", \"are my dependencies compatible\", \"does Azure support my framework\", \"what needs to change before deploying\", \"check my app configuration\".
Agent skill 'azure-cloud-migrate' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-compliance' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-compute' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-cost' from microsoft/azure-skills. Use when the task matches this skill's domain.
Identify Azure cost savings from usage and spending data. USE FOR: optimize Azure costs, reduce Azure spending/expenses, analyze Azure costs, find cost savings, generate cost optimization report, identify orphaned resources to delete, rightsize VMs, reduce waste, optimize Redis costs, optimize storage costs, AKS cost analysis add-on, namespace cost, cost spike, anomaly, budget alert, AKS cost visibility. DO NOT USE FOR: deploying resources (use azure-deploy), general Azure diagnostics (use azure-diagnostics), security issues (use azure-security)
Agent skill 'azure-deploy' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-diagnostics' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-enterprise-infra-planner' from microsoft/azure-skills. Use when the task matches this skill's domain.
Build, deploy, and modify GitHub Copilot SDK apps on Azure. MANDATORY when codebase contains @github/copilot-sdk or CopilotClient in package.json. PREFER OVER azure-prepare when copilot-sdk markers detected. WHEN: copilot SDK, @github/copilot-sdk, copilot-powered app, build copilot app, prepare copilot app, add feature to copilot app, modify copilot app, BYOM, bring your own model, CopilotClient, createSession, sendAndWait, azd init copilot. DO NOT USE FOR: deploying already-prepared copilot-sdk apps (use azure-deploy), general web apps without copilot SDK (use azure-prepare), Copilot Extensions, Foundry agents (use microsoft-foundry).
Agent skill 'azure-kubernetes' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-kusto' from microsoft/azure-skills. Use when the task matches this skill's domain.
Agent skill 'azure-messaging' from microsoft/azure-skills. Use when the task matches this skill's domain.
Azure Observability Services including Azure Monitor, Application Insights, Log Analytics, Alerts, and Workbooks. Provides metrics, APM, distributed tracing, KQL queries, and interactive reports. USE FOR: Azure Monitor, Application Insights, Log Analytics, Alerts, Workbooks, metrics, APM, distributed tracing, KQL queries, interactive reports, observability, monitoring dashboards. DO NOT USE FOR: instrumenting apps with App Insights SDK (use appinsights-instrumentation), querying Kusto/ADX clusters (use azure-kusto), cost analysis (use azure-cost-optimization).
azure-postgres — an installable skill for AI agents.
Gemini CLI one-shot prompts, summaries, generation, skills, hooks, MCP, or Gemma routing.
Fetch GitHub issues, select candidates, spawn background fix agents, open PRs, and optionally process PR review comments.
Create, edit, audit, tidy, validate, or restructure AgentSkills and SKILL.md files.
Search, install, update, sync, or publish agent skills with the ClawHub CLI and registry.
Delegate coding work to Codex, Claude Code, or OpenCode as background workers; not simple edits or read-only code lookup.
List, configure, authenticate, call, and inspect MCP servers/tools with mcporter over HTTP or stdio.