Skill · em Automatizar e estender

entra-agent-id

Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint,…

Procedência

Antes de instalar

7 arquivos · 47,5 KB · só texto, nenhum script

Instalar na sua CLI

O comando baixa a versão fixada (commit 117b038) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.

Claude Code

Neste projeto: instala em .claude/skills/entra-agent-id/.

d=".claude/skills/entra-agent-id"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/entra-agent-id"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/known-limitations.md" "$u/references/known-limitations.md" \
  -o "$d/references/oauth2-token-flow.md" "$u/references/oauth2-token-flow.md" \
  -o "$d/references/obo-blueprint-setup.md" "$u/references/obo-blueprint-setup.md" \
  -o "$d/references/runtime-token-exchange.md" "$u/references/runtime-token-exchange.md" \
  -o "$d/references/sdk-sidecar-deployment.md" "$u/references/sdk-sidecar-deployment.md" \
  -o "$d/references/sdk-sidecar.md" "$u/references/sdk-sidecar.md"

Global: instala em ~/.claude/skills/entra-agent-id/.

d="$HOME/.claude/skills/entra-agent-id"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/entra-agent-id"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/known-limitations.md" "$u/references/known-limitations.md" \
  -o "$d/references/oauth2-token-flow.md" "$u/references/oauth2-token-flow.md" \
  -o "$d/references/obo-blueprint-setup.md" "$u/references/obo-blueprint-setup.md" \
  -o "$d/references/runtime-token-exchange.md" "$u/references/runtime-token-exchange.md" \
  -o "$d/references/sdk-sidecar-deployment.md" "$u/references/sdk-sidecar-deployment.md" \
  -o "$d/references/sdk-sidecar.md" "$u/references/sdk-sidecar.md"

Codex

Neste projeto: instala em .agents/skills/entra-agent-id/.

d=".agents/skills/entra-agent-id"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/entra-agent-id"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/known-limitations.md" "$u/references/known-limitations.md" \
  -o "$d/references/oauth2-token-flow.md" "$u/references/oauth2-token-flow.md" \
  -o "$d/references/obo-blueprint-setup.md" "$u/references/obo-blueprint-setup.md" \
  -o "$d/references/runtime-token-exchange.md" "$u/references/runtime-token-exchange.md" \
  -o "$d/references/sdk-sidecar-deployment.md" "$u/references/sdk-sidecar-deployment.md" \
  -o "$d/references/sdk-sidecar.md" "$u/references/sdk-sidecar.md"

Global: instala em ~/.agents/skills/entra-agent-id/.

d="$HOME/.agents/skills/entra-agent-id"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/entra-agent-id"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/known-limitations.md" "$u/references/known-limitations.md" \
  -o "$d/references/oauth2-token-flow.md" "$u/references/oauth2-token-flow.md" \
  -o "$d/references/obo-blueprint-setup.md" "$u/references/obo-blueprint-setup.md" \
  -o "$d/references/runtime-token-exchange.md" "$u/references/runtime-token-exchange.md" \
  -o "$d/references/sdk-sidecar-deployment.md" "$u/references/sdk-sidecar-deployment.md" \
  -o "$d/references/sdk-sidecar.md" "$u/references/sdk-sidecar.md"

Antigravity

Neste projeto: instala em .agents/skills/entra-agent-id/.

d=".agents/skills/entra-agent-id"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/entra-agent-id"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/known-limitations.md" "$u/references/known-limitations.md" \
  -o "$d/references/oauth2-token-flow.md" "$u/references/oauth2-token-flow.md" \
  -o "$d/references/obo-blueprint-setup.md" "$u/references/obo-blueprint-setup.md" \
  -o "$d/references/runtime-token-exchange.md" "$u/references/runtime-token-exchange.md" \
  -o "$d/references/sdk-sidecar-deployment.md" "$u/references/sdk-sidecar-deployment.md" \
  -o "$d/references/sdk-sidecar.md" "$u/references/sdk-sidecar.md"

Global: instala em ~/.gemini/antigravity-cli/skills/entra-agent-id/.

d="$HOME/.gemini/antigravity-cli/skills/entra-agent-id"
u="https://raw.githubusercontent.com/microsoft/azure-skills/117b038edfef5d7af09848b8ffcd355f28f19956/skills/entra-agent-id"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/references/known-limitations.md" "$u/references/known-limitations.md" \
  -o "$d/references/oauth2-token-flow.md" "$u/references/oauth2-token-flow.md" \
  -o "$d/references/obo-blueprint-setup.md" "$u/references/obo-blueprint-setup.md" \
  -o "$d/references/runtime-token-exchange.md" "$u/references/runtime-token-exchange.md" \
  -o "$d/references/sdk-sidecar-deployment.md" "$u/references/sdk-sidecar-deployment.md" \
  -o "$d/references/sdk-sidecar.md" "$u/references/sdk-sidecar.md"

Peça ao Rook

Já usa o Rook Labs? Cole no chat do Rook: instale a skill https://rooklabs.sh/marketplace/microsoft.azure-skills.entra-agent-id

Prévia do SKILL.md

---
name: entra-agent-id
description: "Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal…
license: MIT
metadata:
  author: Microsoft
  version: "1.1.1"
---

# Microsoft Entra Agent ID

Create and manage OAuth 2.0-capable identities for AI agents using Microsoft Graph. Every agent instance gets a distinct identity, audit trail, and independently-scoped permission grants.

## Quick Reference

| Property | Value |
|----------|-------|
| Service | Microsoft Entra Agent ID |
| API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) |
| Required role | Agent Identity Developer, Agent Identity Administrator, or Application Administrator |
| Object model | Blueprint (application) → BlueprintPrincipal (SP) → Agent Identity (SP) |
| Runtime exchange | Two-step `fmi_path` exchange (autonomous and OBO) |
| .NET helper | `Microsoft.Identity.Web.AgentIdentities` |
| Polyglot helper | Microsoft Entra SDK for AgentID (sidecar container) |

## When to Use This Skill

- Provisioning a new Agent Identity Blueprint and BlueprintPrincipal
- Creating per-instance Agent Identities under a Blueprint
- Configuring credentials (FIC, Managed Identity, or client secret) on the Blueprint
- Implementing the two-step `fmi_path` runtime token exchange (autonomous or OBO)
- Cross-tenant agent token flows
- Deploying the Microsoft Entra SDK for AgentID sidecar for polyglot agents (Python, Node, Go, Java)
- Granting per-Agent-Identity application (`appRoleAssignments`) or delegated (`oauth2PermissionGrants`) permissions
- Diagnosing Agent ID errors such as `AADSTS82001`, `AADSTS700211`, or `PropertyNotCompatibleWithAgentIdentity`

## MCP Tools

| Tool | Use |
|------|-----|
…

Ver todo o marketplace