entra-agent-id

Microsoft Entra Agent ID lets you create and manage OAuth2-capable identities for AI agents using Microsoft Graph beta API. It uses a Blueprint model where each agent type gets an application object, and individual agent instances get their own service principals under that blueprint. Supports Workload Identity Federation and a containerized sidecar for polyglot agent authentication. Instead of sharing a single app registration across multiple agents or using Azure CLI tokens that carry overly broad directory permissions, Entra Agent ID gives each agent instance its own identity with the exact permissions it needs.