Entra-Id

The Auth Chapter Every MCP Tutorial Skips: Real SSO for Microsoft Graph

Deep Dive AI Engineering · Aug 19, 2026 · 16 min read

Production auth for an MCP server on Microsoft Graph: browser SSO with a public client and PKCE, delegated tokens, the On-Behalf-Of exchange, and the engineering that keeps an 85-tool surface safe.

An identity badge passing through a validation seam into a wall of Microsoft Graph tool tiles, most dimmed, a few lit

Zero-Secrets Architecture on Azure: Managed Identity for AI Agents Pinned

Deep Dive Azure · Jul 9, 2026 · 14 min read

The governance case for keyless Azure: why shared keys are a liability, how managed identity plus RBAC fixes it, and how security, network, and platform teams enforce it.

An agent workload holding an identity badge instead of a key ring, reaching Azure resources through an identity shield while a discarded pile of keys sits locked away

Azure App Registration: A Complete Guide from Zero to Working App

Deep Dive Azure · Jan 10, 2026 · 13 min read

Every Microsoft integration I have shipped starts at the same gate. Call the Graph API, wire up SharePoint, add “Sign in with Microsoft” to an app, and none of it works until you have an App Registration. Get it wrong and nothing downstream authenticates, which is why this is the one setup step I slow down for instead of clicking through.

↑