{"id":59164,"date":"2026-10-17T15:01:30","date_gmt":"2026-10-17T05:01:30","guid":{"rendered":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/17\/identity-at-every-hop-with-entra-agent-id-and-managed-identity\/"},"modified":"2026-10-17T15:02:39","modified_gmt":"2026-10-17T05:02:39","slug":"identity-at-every-hop-with-entra-agent-id-and-managed-identity","status":"publish","type":"post","link":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/17\/identity-at-every-hop-with-entra-agent-id-and-managed-identity\/","title":{"rendered":"Identity at Every Hop with Entra Agent ID and Managed Identity"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">In this blog post Identity at Every Hop with Entra Agent ID and Managed Identity we will explain how to stop trusted AI agents becoming an uncontrolled path into sensitive business systems.<\/p>\n\n\n\n<!--more-->\n\n\n\n<p class=\"wp-block-paragraph\">An employee may ask one agent to prepare a customer summary, but that simple request can trigger calls to Microsoft 365, a customer relationship management system, an internal database and another AI agent. If those connections rely on shared passwords, broad permissions or reusable API keys, your security team may struggle to determine who accessed what and why.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Identity at every hop means checking identity and permissions each time the request moves between people, agents, applications and data sources. Microsoft Entra Agent ID gives the AI agent its own governed identity, while managed identities allow services running in Microsoft Azure to authenticate without passwords or secret keys stored in code.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why one secure login is not enough<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Many AI projects secure the first interaction and assume everything behind it can be trusted. The user signs in through Microsoft Teams or an application, the agent receives the request, and security checks effectively stop there.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That approach creates a large blind spot. Once inside, the agent may use a shared credential to search documents, query a database or call another agent. Logs might show that an application accessed the data, but not which agent initiated the action, which user requested it or whether that access was appropriate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The risk grows quickly because agents operate at machine speed. A person might open five customer records in ten minutes. An incorrectly configured agent could retrieve thousands before anyone notices.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For an introduction to assigning individual identities, owners and audit records, read why every AI agent needs an identity. The next step is making sure that identity remains meaningful across the complete workflow.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What the technology does in plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Entra is Microsoft\u2019s identity and access platform. It already helps businesses control how employees and applications sign in, what they can access and under which conditions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft Entra Agent ID extends that model to AI agents. Each agent can receive a distinct identity, a responsible human sponsor, defined permissions and its own activity records. An agent identity blueprint acts as a reusable template, helping organisations apply consistent rules when multiple agents perform similar roles.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A managed identity solves a related but different problem. It gives an Azure-hosted service a secure identity that Azure manages automatically, removing the need to place a password or API key inside source code, configuration files or deployment pipelines.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A useful way to separate the two is:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Entra Agent ID identifies the agent.<\/strong> It answers which agent acted, who is accountable for it and what it should be allowed to do.<\/li>\n<li><strong>A managed identity identifies the Azure workload hosting or supporting it.<\/strong> It lets that workload request short-lived access tokens without storing reusable secrets.<\/li>\n<li><strong>Role-based access control limits permissions.<\/strong> This means each identity receives only the actions needed for its job.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Used together, these controls create a traceable chain rather than a collection of trusted systems sharing powerful credentials.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What identity at every hop looks like<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Consider an employee asking a finance agent to prepare a supplier payment summary. The workflow may involve five separate hops:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>The employee signs in and sends the request.<\/li>\n<li>The finance agent confirms the employee\u2019s identity and permission to use it.<\/li>\n<li>The agent calls a document service to find approved invoices.<\/li>\n<li>It asks a second agent to check supplier details.<\/li>\n<li>It queries a finance system and returns the summary.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">At each hop, the receiving system should validate who or what is calling. It should then grant access only to the required information, rather than accepting a general token or shared key that works everywhere.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the finance agent is acting for a signed-in employee, Microsoft Entra can use an on-behalf-of flow. In plain English, the agent receives a new access token for the next service while preserving the user context and the agent\u2019s role in the request.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the agent is completing an approved background task, it can act using its own identity. That makes it possible to distinguish employee-driven activity from autonomous activity in security and audit records.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Agent-to-agent connections require the same discipline. Our guide to securing agent-to-agent communication examines that trust boundary in more detail.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Why managed identities matter<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">API keys are easy to use during a trial, which is why they often appear in early AI projects. The problem begins when the trial becomes a production service and the original key remains in a configuration file, developer laptop or automation script.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Anyone who obtains that key may inherit the same access. Keys also need to be stored, rotated and replaced, creating ongoing work and the risk of business disruption when an expired credential is discovered too late.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Managed identities replace that reusable secret with token-based access. Azure confirms the workload\u2019s identity and issues a time-limited token for a specific destination. The receiving service still needs an appropriate role assignment, so having an identity does not automatically mean having broad access.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A simplified Python example looks like this:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>from azure.identity import DefaultAzureCredential\n\ncredential = DefaultAzureCredential()\ntoken = credential.get_token(\n &quot;https:\/\/cognitiveservices.azure.com\/.default&quot;\n)\n\n# The Azure service authenticates without an API key in the code.<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">This example shows the managed identity part of the design, not the complete Agent ID workflow. Production agents also need properly configured agent identities, permissions, token validation, logging and human ownership.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">A practical business scenario<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Consider a 200-person professional services business introducing an AI agent to prepare project updates. The agent searches SharePoint, reads selected customer records and sends a draft through Microsoft Teams.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In the first design, every connection uses the same application credential with broad access. The setup works, but the company cannot easily separate one agent\u2019s activity from another, and a leaked credential could expose several systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In the improved design, the agent receives its own Entra Agent ID with an accountable business sponsor. The Azure services use managed identities, and each connection receives only the minimum role required.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The business outcome is not simply \u201cbetter security\u201d. The organisation can investigate unusual activity faster, disable one agent without interrupting unrelated services, reduce manual secret rotation and provide clearer access evidence during customer or compliance reviews.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Five steps for safer agent deployment<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. Map every hop<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Document each person, agent, service and data source involved. Hidden connections are often where shared credentials and excessive permissions survive.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Choose the correct operating context<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Decide whether the agent acts for a signed-in user or independently. Do not use autonomous access when a task should remain limited by the employee\u2019s existing permissions.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Remove stored secrets<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Use managed identities for supported Azure services. Treat API keys as temporary exceptions rather than the default production design.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Apply minimum access<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Give each identity only the roles and data access required for its task. Separate agents with different business purposes instead of placing them behind one powerful identity.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Assign ownership and review access<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Every agent should have a named sponsor, an approval process and a retirement plan. Review permissions regularly, particularly when the agent\u2019s tools, data sources or responsibilities change.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How this supports Australian security obligations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Identity at every hop does not automatically make a business compliant. It does, however, support the access control, accountability and monitoring practices expected by customers, auditors and Australian regulators.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It also complements the Essential Eight, the Australian Government\u2019s cybersecurity framework for reducing common attack risks. In particular, controlled identities and minimum permissions support stronger administration practices, while detailed logs make suspicious activity easier to investigate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For organisations handling personal information, clear access records can also improve incident assessment and response. The important point is being able to show which user, agent and service accessed information, rather than relying on a generic application account.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Build the trust chain before scaling AI<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AI security is no longer only about protecting the model or filtering prompts. The bigger operational question is whether your organisation can verify identity, permission and accountability every time an agent crosses into another system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CloudProInc combines more than 20 years of enterprise IT experience with practical expertise across Microsoft Entra, Azure, Microsoft 365, Microsoft Foundry, OpenAI, Claude, Defender and Wiz. As a Melbourne-based Microsoft Partner and Wiz Security Integrator, we help organisations design agent access that is useful without becoming invisible or overly powerful.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you are unsure where your AI agents use shared secrets, broad permissions or untracked connections, we are happy to map the identity chain with you and identify the highest-priority risks\u2014no strings attached.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"<p>AI agents often cross several systems to complete one task. Learn how identity at every hop limits access, removes shared secrets and creates a reliable audit trail.<\/p>\n","protected":false},"author":1,"featured_media":59166,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":true,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[80,41,13,36],"tags":[],"class_list":["post-59164","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-agents","category-azure-managed-identity","category-blog","category-entra-id"],"jetpack-related-posts":[{"id":59099,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/14\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry\/","url_meta":{"origin":59164,"position":0},"title":"The Identity at Every Hop Blueprint for Teams Copilot and Foundry","author":"CPI Staff","date":"October 14, 2026","format":false,"excerpt":"Learn how to protect AI agents across Teams, Copilot and Microsoft Foundry by checking identity, permissions and accountability at every step.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png 1x, \/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png 1.5x, \/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png 2x, \/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png 3x, \/wp-content\/uploads\/2026\/10\/the-identity-at-every-hop-blueprint-for-teams-copilot-and-foundry.png 4x"},"classes":[]},{"id":57803,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/securing-a2a-agent-communication-using-microsoft-entra-id\/","url_meta":{"origin":59164,"position":1},"title":"Securing A2A Agent Communication Using Microsoft Entra ID","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"AI agents are starting to talk to each other. Here\u2019s how Microsoft Entra ID helps keep those conversations trusted, controlled, and audit-ready.","rel":"","context":"In &quot;Blog&quot;","block_context":{"text":"Blog","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/blog\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 1x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 1.5x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 2x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 3x, \/wp-content\/uploads\/2026\/07\/securing-a2a-agent-communication-using-microsoft-entra-id.png 4x"},"classes":[]},{"id":57961,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/how-microsoft-entra-agent-identities-secure-your-ai-agents\/","url_meta":{"origin":59164,"position":2},"title":"How Microsoft Entra Agent Identities Secure Your AI Agents","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"AI agents need identities just like employees. Learn how Microsoft Entra Agent ID controls access, assigns accountability and creates an audit trail without slowing useful AI projects.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png 1x, \/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png 1.5x, \/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png 2x, \/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png 3x, \/wp-content\/uploads\/2026\/07\/how-microsoft-entra-agent-identities-secure-your-ai-agents.png 4x"},"classes":[]},{"id":58194,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/securing-ai-agent-identities-with-microsoft-entra-id-controls\/","url_meta":{"origin":59164,"position":3},"title":"Securing AI Agent Identities with Microsoft Entra ID Controls","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"AI agents can access business data and act at machine speed. Learn how Microsoft Entra ID gives each agent controlled access, clear ownership and an audit trail.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png 1x, \/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png 1.5x, \/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png 2x, \/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png 3x, \/wp-content\/uploads\/2026\/08\/securing-ai-agent-identities-with-microsoft-entra-id-controls.png 4x"},"classes":[]},{"id":59081,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/entra-agent-id-explained-why-every-ai-agent-needs-an-identity\/","url_meta":{"origin":59164,"position":4},"title":"Entra Agent ID Explained Why Every AI Agent Needs an Identity","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"AI agents need controlled identities, just like employees. Learn how Entra Agent ID limits access, assigns accountability and helps businesses adopt AI without creating hidden security risks.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/10\/entra-agent-id-explained-why-every-ai-agent-needs-an-identity.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/10\/entra-agent-id-explained-why-every-ai-agent-needs-an-identity.png 1x, \/wp-content\/uploads\/2026\/10\/entra-agent-id-explained-why-every-ai-agent-needs-an-identity.png 1.5x, \/wp-content\/uploads\/2026\/10\/entra-agent-id-explained-why-every-ai-agent-needs-an-identity.png 2x, \/wp-content\/uploads\/2026\/10\/entra-agent-id-explained-why-every-ai-agent-needs-an-identity.png 3x, \/wp-content\/uploads\/2026\/10\/entra-agent-id-explained-why-every-ai-agent-needs-an-identity.png 4x"},"classes":[]},{"id":58214,"url":"https:\/\/www.cloudproinc.com.au\/index.php\/2026\/10\/12\/why-ai-agents-need-separate-identities-permissions-and-audit-logs\/","url_meta":{"origin":59164,"position":5},"title":"Why AI Agents Need Separate Identities Permissions and Audit Logs","author":"CPI Staff","date":"October 12, 2026","format":false,"excerpt":"AI agents can access data and act at machine speed. Separate identities, limited permissions and reliable audit logs keep that power controlled, accountable and easier to govern.","rel":"","context":"In &quot;AI Agents&quot;","block_context":{"text":"AI Agents","link":"https:\/\/www.cloudproinc.com.au\/index.php\/category\/ai-agents\/"},"img":{"alt_text":"","src":"\/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png","width":350,"height":200,"srcset":"\/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png 1x, \/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png 1.5x, \/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png 2x, \/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png 3x, \/wp-content\/uploads\/2026\/08\/why-ai-agents-need-separate-identities-permissions-and-audit-logs.png 4x"},"classes":[]}],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"\/wp-content\/uploads\/2026\/10\/identity-at-every-hop-with-entra-agent-id-and-managed-identity.png","_links":{"self":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59164","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/comments?post=59164"}],"version-history":[{"count":1,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59164\/revisions"}],"predecessor-version":[{"id":59165,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/posts\/59164\/revisions\/59165"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media\/59166"}],"wp:attachment":[{"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/media?parent=59164"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/categories?post=59164"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cloudproinc.com.au\/index.php\/wp-json\/wp\/v2\/tags?post=59164"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}