Tag
Entra-Agent-Id
3 posts filed under Entra-Agent-Id.
The OBO Chain Through MCP: Passing User Identity from an Agent to Microsoft Graph
How an AI agent reaches Microsoft Graph as the signed-in user through MCP — why token passthrough fails, and how OBO and RBAC secure the chain.
Choosing the Right Agent Identity: Managed Identity, Entra Agent ID, OBO, or Service Principal
The first design decision for any Azure AI agent is which identity it uses — a decision matrix across managed identity, Entra Agent ID, and OBO.
Microsoft Foundry's Production-Agent Release: A Solution Architect's Read
Foundry made hosted agents GA and put agent identity first with Entra Agent ID — but governance tooling is still preview and there's no SLA yet.
