Identity Security Research Library
Categories
- Active Directory Backup & Recovery (69)
- Active Directory Security (243)
- AD Security 101 (18)
- Agentic AI (13)
- Community Tools (26)
- Crisis Management (5)
- Directory Modernization (10)
- From the Front Lines (70)
- Hybrid Identity Protection (98)
- Identity Attack Catalog (32)
- Identity Security Research Library (10)
- Identity Threat Detection & Response (173)
- Our Mission: Be a Force for Good (14)
- Purple Knight (6)
- Semperis University (5)
- The CISO's Perspective (18)
- Threat Research (91)
- Uncategorized (3)
Where Things Might Go Wrong with Agent Identities in Entra ID—and How to Prevent Disaster
- Semion Vasilevitzky and Jonathan Elkabas
- Jul 12, 2026
AI agents aren’t just code running quietly in the background. They’re code with agency, wrapped in identity, carrying permissions, making decisions, and crossing boundaries on behalf of someone or something else. Learn how to avoid some simple but important misconfigurations as your organization begins adopting Agent ID at scale.
Practice Checkpoint 4: Verifying Tokens and Claims in 3 Entra ID Authentication Flows
- Semion Vasilevitzky and Jonathan Elkabas
- Jul 11, 2026
In the previous chapter of our guide to protecting agent identities, you learned about and practiced using Microsoft’s Agent Registry. In this Practice checkpoint, follow the steps to verify three agent identity authentication flows in Entra ID.
Practice Checkpoint 3: Registering an Agent—With and Without Agent ID
- Semion Vasilevitzky and Jonathan Elkabas
- Jul 10, 2026
In the third hands-on practice session in our series on understanding and preventing Entra ID identity attacks, you’ll learn how Microsoft’s Agent Registry works by walking through the steps of registering a new agent identity.
The Agent Registry and How Agent Identities Operate in Entra ID
- Semion Vasilevitzky and Jonathan Elkabas
- Jul 10, 2026
Editor’s Note: Welcome to Chapter 5 of Understanding and Preventing Entra ID Agent Identity Attacks: A Comprehensive Guide. This multi-part technical walkthrough helps you understand Microsoft’s approach to agent identities and how you can protect them from threat actors. To review previous chapters and practice lessons, start here. While we…
Practice Checkpoint 2: Setting Agent Identity Permissions
- Semion Vasilevitzky and Jonathan Elkabas
- Jul 10, 2026
In this Practice Checkpoint—part of our comprehensive Guide to Preventing Entra ID Identity Attacks—you'll walk through the steps to wire up the permission model for an agent identity in the same way it appears in real deployments.
Agent Identities: Design Deep Dive
- Semion Vasilevitzky and Jonathan Elkabas
- Jul 10, 2026
In the previous chapter of this comprehensive guide to preventing Entra ID agent identity attacks, we defined the core objects that make up the Agent ID model. With that overarching model in mind, we’re ready to develop a deeper understanding of how identities inherit properties in the Agent ID platform.
Practice Checkpoint 1: Building Agent ID with MS Graph
- Semion Vasilevitzky and Jonathan Elkabas
- Jun 30, 2026
The fastest way to truly understand Microsoft Agent ID is to build an agent identity yourself, from scratch. Walk through this guided tour to build a real Agent ID object set in your Entra ID tenant.
Agent ID: Understanding Microsoft’s Agent Identity Platform
- Semion Vasilevitzky and Jonathan Elkabas
- Jun 30, 2026
Microsoft’s Entra Agent ID and the agent identity platform are about to become a major theme in identity and security conversations. Learn how this platform enables you to discover, manage, monitor, and secure AI agent identities.
