<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Conditional-Access on Nitin Kumar Singh</title><link>https://nitinksingh.com/tags/conditional-access/</link><description>Recent content in Conditional-Access on Nitin Kumar Singh</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© 2026 Nitin Kumar Singh. All rights reserved.</copyright><lastBuildDate>Tue, 14 Jul 2026 09:00:00 +0530</lastBuildDate><atom:link href="https://nitinksingh.com/tags/conditional-access/index.xml" rel="self" type="application/rss+xml"/><item><title>The OBO Chain Through MCP: Passing User Identity from an Agent to Microsoft Graph</title><link>https://nitinksingh.com/posts/obo-chain-through-mcp/</link><pubDate>Tue, 14 Jul 2026 09:00:00 +0530</pubDate><guid>https://nitinksingh.com/posts/obo-chain-through-mcp/</guid><description>How an AI agent reaches Microsoft Graph as the signed-in user through MCP — why token passthrough fails, and how on-behalf-of, Conditional Access, and RBAC secure the chain.</description></item></channel></rss>