New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Apex Entra App Registration

by jonathan-vella in jonathan-vella/apex

WORKFLOW SKILL — Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.

MITAuto-check passedBackend & APIs

Install Apex Entra App Registration

skills CLI
$ npx skills add jonathan-vella/apex --skill apex-entra-app-registration -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install jonathan-vella/apex apex-entra-app-registration --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/jonathan-vella/apex.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.github/skills/apex-entra-app-registration .claude/skills/apex-entra-app-registration && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
apex-entra-app-registration
GitHub stars
217
Token cost
~1.3k tokens
SKILL.md length
378 words
Files
13 (incl. references)
Skills in repo
39
Repo updated
First seen
Licence
MIT

At a glance

WORKFLOW SKILL — Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.

  • Works in 5 steps: Register the Application — portal, CLI… → Configure Authentication — redirect URIs… → Configure API Permissions — Graph and… → …
  • : Azure RBAC (apex-azure-rbac)
  • SKILL.md covers Rules, Core Workflow, Microsoft Authentication… and Security Best Practices, plus 1 more section
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Apex Entra App Registration is an agent skill from jonathan-vella/apex. WORKFLOW SKILL — Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. WHEN: "create app registration", "register Azure AD app", "configure OAuth", "add API permissions", "generate service principal", "MSAL example", "Entra ID setup". DO NOT USE FOR: Azure RBAC (apex-azure-rbac), Key Vault audits (apex-azure-compliance), resource security scanning (apex-azure-compliance).

Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 14 other files, including reference files (for example `references/api-permissions.md`, `references/auth-best-practices.md` and `references/cli-commands.md`).

It sits in Backend & APIs, covering Authorization and RBAC, Secrets management and Infrastructure as code. It works with Microsoft Entra ID, Microsoft Azure and Bicep. The repository describes itself as: APEX turns Azure platform engineering requirements into verified, deploy-ready IaC — powered by GitHub Copilot agents, real-time pricing, and built-in compliance. The licence is MIT.

When your agent uses it

  • : Azure RBAC (apex-azure-rbac)
  • Key Vault audits (apex-azure-compliance)
  • Resource security scanning (apex-azure-compliance)

Example prompts

  • “create app registration”
  • “register Azure AD app”
  • “configure OAuth”
  • “/apex-entra-app-registration”

Requirements

  • Python 3

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

  1. Register the Application — portal, CLI (cli-commands.md), or IaC (BICEP-EXAMPLE.bicep)
  2. Configure Authentication — redirect URIs / token settings per app type
  3. Configure API Permissions — Graph and custom-API scopes (api-permissions.md)
  4. Create Client Credentials — secret / certificate / federated identity (Key Vault)
  5. Implement OAuth Flow — code integration (oauth-flows.md, console-app-example.md)

What it can do on your machine

Read from SKILL.md and the folder at commit b8e5908. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Apex Entra App Registration loads about 1.3k tokens when it runs, and up to ~22k if it reads all its reference files. Until then it costs about 111 tokens; SKILL.md has 378 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~111
When it runs · the whole SKILL.md, loaded when a task matches
~1.3k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~22k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from jonathan-vella/apex at commit b8e5908, republished under its MIT licence (© jonathan-vella). 378 words, ~1,313 tokens.

Download SKILL.mdSave it as .claude/skills/apex-entra-app-registration/SKILL.md (or your agent's skills folder). This skill also uses 12 other files; get the full folder from GitHub.
name
apex-entra-app-registration
description
**WORKFLOW SKILL** — Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. WHEN: "create app registration", "register Azure AD app", "configure OAuth", "add API permissions", "generate service principal", "MSAL example", "Entra ID setup". DO NOT USE FOR: Azure RBAC (apex-azure-rbac), Key Vault audits (apex-azure-compliance), resource security scanning (apex-azure-compliance).
user-invocable
true
disable-model-invocation
false
argument-hint
application type and authentication requirements
license
MIT
metadata.author
Microsoft
metadata.version
1.0.0

Entra App Registration

Microsoft Entra ID (formerly Azure AD) is Microsoft's cloud identity and access-management service. This skill guides app registration, OAuth 2.0 flows, and MSAL integration.

For key concepts, application types, and the 3 common patterns (first-time registration, console app with user auth, service-to-service), read references/common-patterns.md.

Rules

  • Prefer IaC for managing app registrations when the project uses IaC, scales to many apps, or needs audit history (see references/BICEP-EXAMPLE.bicep)
  • Prefer certificates or federated identity credentials over client secrets in production
  • Protect credential handoff — follow the additive credential procedure; never expose values to chat, tool output or logs
  • Bind identity and approval — use the identity and permission boundary before authentication, creation, rotation or consent; instructions are not write authorization
  • Grant least-privilege API permissions — only the scopes the app actually uses
  • CLI for ad-hoc, IaC for production — see references/cli-commands.md
  • Out of scope: Azure RBAC (apex-azure-rbac), Key Vault audits (apex-azure-compliance), resource security scanning (apex-azure-compliance)

Core Workflow

Five-step procedure (full per-step detail in references/core-workflow.md):

  1. Register the Application — portal, CLI (cli-commands.md), or IaC (BICEP-EXAMPLE.bicep)
  2. Configure Authentication — redirect URIs / token settings per app type
  3. Configure API Permissions — Graph and custom-API scopes (api-permissions.md)
  4. Create Client Credentials — secret / certificate / federated identity (Key Vault)
  5. Implement OAuth Flow — code integration (oauth-flows.md, console-app-example.md)
Show full SKILL.md (171 more words)Show less

Microsoft Authentication Library (MSAL)

Recommended library for integrating with the Microsoft identity platform:

  • .NET / C# — Microsoft.Identity.Client
  • JavaScript / TypeScript — @azure/msal-browser, @azure/msal-node
  • Python — msal

Examples: references/console-app-example.md. SDK quick references in references/sdk/: Azure Identity for Rust and the Functions authentication-events extension for .NET. Azure Identity for other languages lives in apex-azure-deploy/references/sdk/.

Security Best Practices

Never hardcode secrets · rotate regularly · prefer certificates over secrets in production · least-privilege API permissions · enable MFA · use managed identity for Azure-hosted apps · validate tokens (issuer / audience / expiration) · HTTPS-only redirect URIs (per the canonical security baseline) · monitor sign-ins via Entra ID logs.

Full details in references/auth-best-practices.md.

Reference Index

ReferenceWhen to Load
references/common-patterns.mdKey concepts, app types, 3 common registration patterns
references/core-workflow.mdFull per-step procedure for app registration
references/api-permissions.mdGraph and custom-API permission configuration
references/auth-best-practices.mdDetailed security best practices
references/cli-commands.mdAzure CLI reference for app registrations
references/console-app-example.mdComplete working code examples (multiple languages)
references/first-app-registration.mdStep-by-step guide for beginners
references/oauth-flows.mdDetailed OAuth 2.0 flow explanations
references/troubleshooting.mdCommon issues and solutions
references/BICEP-EXAMPLE.bicepBicep template for IaC-managed app registration
references/sdk/*.mdLanguage-specific SDK quick references

© jonathan-vella, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 12 other files (references) in .github/skills/apex-entra-app-registration of jonathan-vella/apex.

  • SKILL.md
  • references/BICEP-EXAMPLE.bicep
  • references/api-permissions.md
  • references/auth-best-practices.md
  • references/cli-commands.md
  • references/common-patterns.md
  • references/console-app-example.md
  • references/core-workflow.md
  • references/first-app-registration.md
  • references/oauth-flows.md
  • references/sdk/azure-identity-rust.md
  • references/sdk/microsoft-azure-webjobs-extensions-authentication-events-dotnet.md
  • references/troubleshooting.md

Open the folder on GitHubat commit b8e5908

Compare with similar skills

Apex Entra App Registration next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Apex Entra App Registration compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Apex Entra App Registration this skilljonathan-vella/apex217—~1.3kAutomated safety check: PassMIT
Entra App Registrationmicrosoft/GitHub-Copilot-for-Azure2552 repos~2.1kAutomated safety check: PassMIT
Iam Auditbriiirussell/cybersecurity-skills413—~3.1kAutomated safety check: NotesMIT
Azure Bicep Skilltimothywarner-org/claude-code224—~2.9kAutomated safety check: PassMIT
Writing Bicep Templatesmicrosoft-foundry/foundry-agent-webapp127—~1.2kAutomated safety check: PassMIT
Azure Key VaultKilo-Org/kilo-marketplace1901 repos~1.9kAutomated safety check: PassMIT

Similar skills

  • Entra App Registration

    microsoft/GitHub-Copilot-for-Azure

    Official

    Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.

    255 GitHub starsUsed in 2 repos~2.1k tokens
    Backend & APIsAuto-check passed

  • Iam Audit

    briiirussell/cybersecurity-skills

    Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers (Okta, Entra ID / Azure AD, Auth0, Google Workspace), application authorization…

    413 GitHub stars~3.1k tokensUpdated 4 mo ago
    Backend & APIsAuto-check: notes

  • Azure Bicep Skill

    timothywarner-org/claude-code

    A skill your agent uses when authoring, reviewing, or refactoring Azure Bicep code.

    224 GitHub stars~2.9k tokensUpdated 2 mo ago
    DevOps & CloudAuto-check passed

  • Writing Bicep Templates

    microsoft-foundry/foundry-agent-webapp

    Provides Bicep coding standards for Azure infrastructure in this repository.

    127 GitHub stars~1.2k tokensUpdated 5 mo ago
    Backend & APIsAuto-check passed

  • Azure Key Vault

    Kilo-Org/kilo-marketplace

    Guidance for Azure Key Vault — securely storing and managing secrets, keys, and certificates with RBAC, network isolation, managed identity access, soft delete / purge protection, and rotation.

    190 GitHub starsUsed in 1 repo~1.9k tokens
    Backend & APIsAuto-check passed

  • API Security Design

    vinayaklatthe/microsoft-security-skills

    Guidance for designing secure APIs on Azure - authentication, authorization, gateway controls, input validation, rate limiting, secret management, and runtime threat detection - aligned to OWASP API…

    175 GitHub stars~2.2k tokensUpdated 3 mo ago
    Backend & APIsAuto-check passed

More from jonathan-vella/apex

All 39 skills in this repo

  • Apex Azure Diagnostics

    jonathan-vella/apex

    WORKFLOW SKILL — Debug Azure production issues: Container Apps, Functions, App Service, AKS, VMs and messaging, with KQL log analysis.

    217 GitHub stars~2.1k tokensUpdated today
    Auto-check passed

  • Apex Azure Governance Discovery

    jonathan-vella/apex

    ANALYSIS SKILL — Azure Policy discovery: effective assignments (incl.

    217 GitHub stars~2.1k tokensUpdated today
    Auto-check passed

  • Apex Context Management

    jonathan-vella/apex

    UTILITY SKILL — Two-mode context-window management. An agent skill from jonathan-vella/apex.

    217 GitHub stars~1.8k tokensUpdated today
    Auto-check passed

  • Apex Python Diagrams

    jonathan-vella/apex

    UTILITY SKILL — Python diagram generation for Azure architectures, WAF/cost/compliance charts, ERDs, swimlanes, timelines, and wireframes.

    217 GitHub stars~2k tokensUpdated today
    Auto-check passed

  • Apex Terraform Search Import

    jonathan-vella/apex

    WORKFLOW SKILL — Manual-only discovery and import of existing Azure resources into Terraform management.

    217 GitHub stars~1.4k tokensUpdated today
    Auto-check passed

  • Apex Vendor Prompting

    jonathan-vella/apex

    ANALYSIS SKILL — Manual-only audit of Anthropic Claude Opus 5.5 / Sonnet 5.5 and OpenAI GPT-6 / GPT-5.6 prompting guidance and APEX conventions.

    217 GitHub stars~2.7k tokensUpdated today
    Auto-check passed

Works with

Categories

Questions about Apex Entra App Registration

What does Apex Entra App Registration do?

WORKFLOW SKILL — Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. Apex Entra App Registration is an agent skill from jonathan-vella/apex.0 authentication, and MSAL integration.

When should I use Apex Entra App Registration?

Apex Entra App Registration fits situations like: : Azure RBAC (apex-azure-rbac); key Vault audits (apex-azure-compliance); resource security scanning (apex-azure-compliance).

How do I install Apex Entra App Registration in Claude Code?

Run `npx skills add jonathan-vella/apex --skill apex-entra-app-registration -a claude-code`. Or copy the skill folder (.github/skills/apex-entra-app-registration in jonathan-vella/apex) into .claude/skills/apex-entra-app-registration in your project. Claude Code loads it when a task matches its description.

How do I install Apex Entra App Registration in Codex?

Run `npx skills add jonathan-vella/apex --skill apex-entra-app-registration -a codex`. Or copy the skill folder (.github/skills/apex-entra-app-registration in jonathan-vella/apex) into .agents/skills/apex-entra-app-registration in your project. Codex loads it when a task matches its description.

Can I use Apex Entra App Registration in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jonathan-vella/apex --skill apex-entra-app-registration -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/apex-entra-app-registration, .gemini/skills/apex-entra-app-registration, .github/skills/apex-entra-app-registration and .opencode/skills/apex-entra-app-registration in your project.

What does Apex Entra App Registration need to run?

SKILL.md names no scripts, command-line tools or credentials: Apex Entra App Registration is instructions for the agent only. Our summary lists: Python 3.

Does Apex Entra App Registration access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Apex Entra App Registration safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Apex Entra App Registration use?

Apex Entra App Registration is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Apex Entra App Registration use?

About 1.3k tokens (SKILL.md is roughly 5.3k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 20k tokens, read only when the agent opens those files.

What are the alternatives to Apex Entra App Registration?

Skills that share tags, products or a category with Apex Entra App Registration: Entra App Registration (microsoft/GitHub-Copilot-for-Azure, 255 stars), Iam Audit (briiirussell/cybersecurity-skills, 413 stars), Azure Bicep Skill (timothywarner-org/claude-code, 224 stars) and Writing Bicep Templates (microsoft-foundry/foundry-agent-webapp, 127 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Apex Entra App Registration?

jonathan-vella (a GitHub user) maintains it in jonathan-vella/apex, which has 217 GitHub stars. The repository holds 39 skills in this directory. The repository was last updated on October 10, 2026.

Source: jonathan-vella/apex on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.