Expert Resources from the Semperis Research Team
Identity Security Research Library
Stay up to speed on emerging identity security threats with the latest published CVEs, blogs, industry articles, and commentary from Semperis’ expert research team.
A Comprehensive Guide to Understanding and Preventing Entra ID Agent Identity Attacks
Every cyber defender is struggling to answer the security questions that accompany the emergence of AI agents.
In no arena are these questions more critical than in the identity security infrastructure.
Developed by the Semperis research team, this practical guide helps you understand how Microsoft approaches Entra ID identities—both human and non-human—and how you can protect these critical assets from threat actors.
Guide to Preventing Entra ID Agent Attacks
A brief introduction to our practical guide to help you protect critical identity assets from threat actors
Meet the Players
Workload Identities, enterprise applications, service principals, and other forms of organized confusion
Agent ID: Understanding Microsoft’s Agent Identity Platform
Microsoft’s Entra Agent ID and the agent identity platform are about to become a major theme in identity and security conversations.
Bonus tutorial | Practice Checkpoint 1: Building an Agent ID with Microsoft Graph
Agent Identities: Design Deep Dive
Develop a deeper understanding of how identities in the Agent ID platform are structured, starting with exploring the Microsoft Graph data model.
Bonus tutorial | Practice Checkpoint 2: Setting Agent Identity Permissions
The Agent Registry: Not the Registry You’re Thinking Of
Learn about the Microsoft Agent Registry, the centralized inventory and governance view for AI agents in the organization.
Bonus tutorial | Practice Checkpoint 3: Registering an Agent with and without Agent ID
Where Things Might Go Wrong with Agent Identities in Entra ID—and How to Prevent Disaster
The Agent ID platform introduces new identity types and operational patterns, and because the feature is just starting to evolve, its real-world misconfigurations and attack paths are only beginning to surface. Learn about a small set of simple but important misconfigurations that are likely to become common as organizations begin adopting Agent ID at scale.
Featured resources from the Semperis Identity Security Research Team
- Semperis Research Team
- Andrea Pierini
- Mar 23, 2026
