Cloud platform
Microsoft Entra ID agent skills for Claude Code, Codex and other agents.
- skills
- 81
- official
- 16
- Type
- Cloud platform
- Website
- microsoft.com
- Reviews
- See Microsoft Entra ID on Enlisted
Microsoft Entra ID skills, ranked
Ranked by score. Sort bymost stars,trending,newest,recently updated
Official (16 skills)
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 1 | Python guidance for the Azure AI Search SDK covering vector, hybrid and semantic search, index management and indexers, with Entra ID authentication preferred over keys. | microsoft/ | 3.1k | 6 repos | ~4.4k | Automated safety check: Pass | MIT | yesterday |
| 2 | Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmipath, OBO, cross-tenant)… | microsoft/ | 255 | 3 repos | ~4k | Automated safety check: Pass | MIT | today |
| 3 | Azure Identity library for .NET. An agent skill from microsoft/skills. | microsoft/ | 3.1k | 6 repos | ~2.5k | Automated safety check: Pass | MIT | yesterday |
| 4 | Connect to Azure Database for PostgreSQL Flexible Server from Node.js/TypeScript using the pg (node-postgres) package. | microsoft/ | 3.1k | 5 repos | ~3.3k | Automated safety check: Pass | MIT | yesterday |
| 5 | Microsoft Entra Authentication Events SDK for .NET. An agent skill from microsoft/skills. | microsoft/ | 3.1k | 5 repos | ~3.8k | Automated safety check: Pass | MIT | yesterday |
| 6 | Microsoft Store Developer CLI (msstore) for publishing Windows applications to the Microsoft Store. | github/ | 40k | 1 repo | ~4.1k | Automated safety check: Pass | MIT | today |
| 7 | Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. | microsoft/ | 255 | 2 repos | ~2.1k | Automated safety check: Pass | MIT | today |
| 8 | Create Agent Users in Microsoft Entra ID from Agent Identities, enabling AI agents to act as digital workers with user identity capabilities in Microsoft 365 and Azure environments. | github/ | 40k | 1 repo | ~2.3k | Automated safety check: Pass | MIT | today |
| 9 | Microsoft Entra Agent ID (preview) for creating OAuth2-capable AI agent identities via Microsoft Graph beta API. | microsoft/ | 3.1k | 1 repo | ~2.3k | Automated safety check: Pass | MIT | yesterday |
| 10 | Azure Identity SDK for Python authentication with Microsoft Entra ID. | microsoft/ | 3.1k | — | ~4.4k | Automated safety check: Pass | MIT | yesterday |
| 11 | Azure Identity library for Rust. An agent skill from microsoft/skills. | microsoft/ | 3.1k | — | ~1.6k | Automated safety check: Pass | MIT | yesterday |
| 12 | A skill your agent uses when the user wants to discover and verify available Entra ID app registrations, wire one to a Power Apps Wrap mobile app, or create one through the Wrap page and update… | microsoft/ | 967 | — | ~2.8k | Automated safety check: Notes | MIT | today |
| 13 | Expert knowledge for Azure Bastion development including best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, and integrations & coding patterns. | MicrosoftDocs/ | 775 | — | ~1.8k | Automated safety check: Pass | CC-BY-4.0 | yesterday |
| 14 | Expert knowledge for Azure Key Vault development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations &… | MicrosoftDocs/ | 775 | — | ~4.9k | Automated safety check: Pass | CC-BY-4.0 | yesterday |
| 15 | Expert knowledge for Azure Managed Redis development including troubleshooting, best practices, decision making, architecture & design patterns, security, configuration, integrations & coding… | MicrosoftDocs/ | 775 | — | ~3.4k | Automated safety check: Pass | CC-BY-4.0 | yesterday |
| 16 | Expert knowledge for Azure Relay development including troubleshooting, security, configuration, and integrations & coding patterns. | MicrosoftDocs/ | 775 | — | ~1.1k | Automated safety check: Pass | CC-BY-4.0 | yesterday |
Community
| # | Skill | Repository | Stars | Used in | Tokens | Auto-check | Licence | Updated |
|---|---|---|---|---|---|---|---|---|
| 17 | Authorization Code Flow for web applications using MSAL.NET confidential client to sign in users and access APIs on their behalf | AzureAD/ | 1.5k | — | ~917 | Automated safety check: Pass | MIT | today |
| 18 | Client Credentials Flow for service-to-service (daemon) authentication in MSAL.NET without user involvement | AzureAD/ | 1.5k | — | ~1.1k | Automated safety check: Pass | MIT | today |
| 19 | On-Behalf-Of (OBO) Flow for web APIs to call downstream APIs while preserving user identity in MSAL.NET | AzureAD/ | 1.5k | — | ~1.2k | Automated safety check: Pass | MIT | today |
| 20 | Use CLI for Microsoft 365 to manage Microsoft 365 tenants from the terminal. | pnp/ | 131 | — | ~3.5k | Automated safety check: Pass | MIT | 2 days ago |
| 21 | Write PowerShell scripts using CLI for Microsoft 365 commands to automate Microsoft 365 management tasks. | pnp/ | 131 | — | ~3.3k | Automated safety check: Pass | MIT | 2 days ago |
| 22 | Generates Azure API Management policy XML for authentication, rate limiting, CORS, error handling and transformations, consulting Azure best-practice and documentation tools first. | thomast1906/ | 202 | — | ~1.5k | Automated safety check: Pass | MIT | 2 mo ago |
| 23 | Supplies Bicep and Terraform templates, CI/CD pipeline patterns and phased promotion plans for deploying Azure API Management with APIOps workflows. | thomast1906/ | 202 | — | ~3.6k | Automated safety check: Pass | MIT | 2 mo ago |
| 24 | Guidance for securing Azure App Service web apps and APIs — managed identity, Easy Auth with Microsoft Entra ID, network isolation via private endpoints + VNet integration, HTTPS / TLS hardening… | vinayaklatthe/ | 175 | — | ~1.9k | Automated safety check: Pass | MIT | 3 mo ago |
| 25 | 25.Maui Aspire Guide for .NET MAUI apps consuming .NET Aspire-hosted backend services. | davidortinau/ | 174 | — | ~1.3k | Automated safety check: Pass | MIT | 3 mo ago |
| 26 | Audit Entra ID app registration and service principal security posture. | SCStelz/ | 249 | — | ~21k | Automated safety check: Pass | MIT | yesterday |
| 27 | Add authentication to .NET MAUI apps. An agent skill from davidortinau/maui-skills. | davidortinau/ | 174 | — | ~1.5k | Automated safety check: Pass | MIT | 3 mo ago |
| 28 | A skill your agent uses when asked to trace authentication flows, analyze SessionId chains, investigate token reuse vs interactive MFA, or assess geographic anomalies in sign-ins. | SCStelz/ | 249 | — | ~8.6k | Automated safety check: Pass | MIT | yesterday |
| 29 | Configure SAML 2.0 identity federation between on-premises Active Directory (via AD FS or a third-party IdP) and Microsoft Entra ID, covering federation models (AD FS, password hash sync… | mukul975/ | 34k | — | ~2.5k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 30 | Microsoft 365 tenant administration for Global Administrators. | alirezarezvani/ | 28k | 1 repo | ~2.8k | Automated safety check: Pass | MIT | 1 mo ago |
| 31 | 31.Azure Microsoft Azure expert for az CLI, AKS, App Service, and cloud infrastructure | RightNow-AI/ | 18k | — | ~932 | Automated safety check: Pass | Apache-2.0 | 3 mo ago |
| 32 | Helps you triage a quarterly user access review from an Okta, Azure AD, AWS IAM, GitHub, or generic CSV/JSON export. | GRCEngClub/ | 419 | — | ~2.4k | Automated safety check: Notes | Unknown | 3 days ago |
| 33 | Detect Azure service principal abuse in Microsoft Entra ID using KQL detection queries (Sentinel/Splunk) against Azure AD Audit and Sign-in Logs, covering added credentials, privileged role… | mukul975/ | 34k | — | ~2.1k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 34 | Configure Microsoft Entra Privileged Identity Management (PIM) to convert standing privileged assignments into eligible, time-bound roles requiring justification, MFA, and approval, covering Entra… | mukul975/ | 34k | — | ~2.6k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 35 | Configures SAML 2.0 single sign-on for Google Workspace against a third-party identity provider (Okta, Azure AD/Entra ID, ADFS), with Workspace as the Service Provider, to centralize authentication… | mukul975/ | 34k | — | ~2k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 36 | Implements continuous, risk-adaptive identity verification for zero trust using phishing-resistant MFA (FIDO2/WebAuthn), risk-based conditional access, and identity governance aligned with NIST SP… | mukul975/ | 34k | — | ~2.4k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 37 | Set up and manage SSO, SCIM provisioning, and MFA for startup teams using Google Workspace, Okta, or Azure AD. | sickn33/ | 47k | 1 repo | ~2.9k | Automated safety check: Pass | MIT | yesterday |
| 38 | Hunt AADGraphActivityLogs and MicrosoftGraphActivityLogs in Microsoft Sentinel/Log Analytics using KQL to fingerprint offensive Entra ID enumeration tools such as ROADtools, AADInternals, and… | mukul975/ | 34k | — | ~2.8k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 39 | Detect and respond to OAuth token theft and replay in Microsoft Entra ID (Azure AD), covering access token theft, refresh token replay, Primary Refresh Token (PRT) abuse, pass-the-cookie attacks… | mukul975/ | 34k | — | ~3.2k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 40 | Provides authentication troubleshooting for MSAL, JWT, and Entra ID. | microsoft-foundry/ | 127 | — | ~682 | Automated safety check: Notes | MIT | 5 mo ago |
| 41 | Set up the Datadog Azure integration with Terraform - creates an Entra ID app registration and service principal, assigns Monitoring Reader across the chosen subscriptions and management groups… | datadog-labs/ | 177 | — | ~7.1k | Automated safety check: Notes | MIT | 5 days ago |
| 42 | Send and read emails, manage calendar events, and access contacts via Microsoft Graph API for Outlook/M365. | hewi333/ | 122 | — | ~2.9k | Automated safety check: Notes | MIT | 26 days ago |
| 43 | Design identity governance and lifecycle (IGA) programs on platforms like SailPoint, Saviynt, or Entra ID Governance, covering joiner-mover-leaver (JML) automation, role mining, access requests… | mukul975/ | 34k | — | ~7.3k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 44 | Conduct internal Active Directory reconnaissance using BloodHound Community Edition's graph database with the SharpHound (AD) and AzureHound (Entra ID) collectors, mapping ACLs, sessions, and group… | mukul975/ | 34k | — | ~2k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 45 | Detect and respond to Adversary-in-the-Middle (AiTM) phishing attacks that use reverse proxy kits like EvilProxy, Evilginx, and Tycoon 2FA to bypass MFA and steal session tokens, correlating Azure… | mukul975/ | 34k | — | ~1.7k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 46 | 46.Iam Audit Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers (Okta, Entra ID / Azure AD, Auth0, Google Workspace), application authorization… | briiirussell/ | 412 | — | ~3.1k | Automated safety check: Notes | MIT | 4 mo ago |
| 47 | Auditing Microsoft Entra ID (Azure Active Directory) configuration to identify risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest… | mukul975/ | 34k | — | ~3k | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
| 48 | Detect compromised O365 and Google Workspace email accounts by analyzing Unified Audit Logs and Azure AD sign-in logs for impossible travel, inbox rule creation/deletion (Set-InboxRule… | mukul975/ | 34k | — | ~823 | Automated safety check: Pass | Apache-2.0 | 1 mo ago |
Questions, answered from the data.
What is the best Microsoft Entra ID skill?
Azure AI Search Python SDK (official) from microsoft/skills ranks first of the 81 Microsoft Entra ID skills listed here, with the highest score: its repository has 3.1k GitHub stars, 6 other GitHub owners carry a copy, its SKILL.md loads about 4.4k tokens and it passes the automated safety check with no findings. Next come Entra Agent Id and Azure Identity Dotnet.
Is there an official Microsoft Entra ID skill?
16 of the 81 Microsoft Entra ID skills are official, published by the vendor's own GitHub organization: Azure AI Search Python SDK, Entra Agent Id, Azure Identity Dotnet, Azure Postgres TS, Microsoft Azure Webjobs Extensions Authentication Events Dotnet and 11 more.
How are these skills ranked?
By Skill Navigator score, which combines the GitHub stars of the skill's repository (shared across that repo's skills and discounted for large collections), how many other GitHub owners carry a copy of the skill, and automated SKILL.md quality checks, minus penalties for safety-check warnings and for each further skill from the same repository. Skills that fail the safety check are not listed.