[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-microsoft-entra-app-registration":3,"mdc-jotsur-key":40,"related-repo-microsoft-entra-app-registration":1399,"related-org-microsoft-entra-app-registration":1529},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":28,"repoUrl":29,"updatedAt":30,"license":31,"forks":32,"topics":33,"repo":35,"sourceUrl":38,"mdContent":39},"entra-app-registration","register and configure Entra ID applications","Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"microsoft","Microsoft","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fmicrosoft.png",[12,16,19,22,25],{"name":13,"slug":14,"type":15},"Security","security","tag",{"name":17,"slug":18,"type":15},"Azure","azure",{"name":20,"slug":21,"type":15},"Authentication","authentication",{"name":23,"slug":24,"type":15},"Access Control","access-control",{"name":26,"slug":27,"type":15},"OAuth","oauth",1324,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills","2026-07-31T05:56:18.085242","MIT",220,[34],"agent-skills",{"repoUrl":29,"stars":28,"forks":32,"topics":36,"description":37},[34],"Official agent plugin providing skills and MCP server configurations for Azure scenarios.","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Ftree\u002FHEAD\u002Fskills\u002Fentra-app-registration","---\nname: entra-app-registration\ndescription: \"Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.\"\nlicense: MIT\nmetadata:\n  author: Microsoft\n  version: \"1.2.1\"\n---\n\n## Overview\n\nMicrosoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud-based identity and access management service. App registrations allow applications to authenticate users and access Azure resources securely.\n\n### Key Concepts\n\n| Concept | Description |\n|---------|-------------|\n| **App Registration** | Configuration that allows an app to use Microsoft identity platform |\n| **Application (Client) ID** | Unique identifier for your application |\n| **Tenant ID** | Unique identifier for your Azure AD tenant\u002Fdirectory |\n| **Client Secret** | Password for the application (confidential clients only) |\n| **Redirect URI** | URL where authentication responses are sent |\n| **API Permissions** | Access scopes your app requests |\n| **Service Principal** | Identity created in your tenant when you register an app |\n\n### Application Types\n\n| Type | Use Case |\n|------|----------|\n| **Web Application** | Server-side apps, APIs |\n| **Single Page App (SPA)** | JavaScript\u002FReact\u002FAngular apps |\n| **Mobile\u002FNative App** | Desktop, mobile apps |\n| **Daemon\u002FService** | Background services, APIs |\n\n## Core Workflow\n\n### Step 1: Register the Application\n\nCreate an app registration in the Azure portal or using Azure CLI.\n\n**Portal Method:**\n1. Navigate to Azure Portal → Microsoft Entra ID → App registrations\n2. Click \"New registration\"\n3. Provide name, supported account types, and redirect URI\n4. Click \"Register\"\n\n**CLI Method:** See [references\u002Fcli-commands.md](references\u002Fcli-commands.md)\n**IaC Method:** See [references\u002FBICEP-EXAMPLE.bicep](references\u002FBICEP-EXAMPLE.bicep)\n\nIt's highly recommended to use the IaC to manage Entra app registration if you already use IaC in your project, need a scalable solution for managing lots of app registrations or need fine-grained audit history of the configuration changes. \n\n### Step 2: Configure Authentication\n\nSet up authentication settings based on your application type.\n\n- **Web Apps**: Add redirect URIs, enable ID tokens if needed\n- **SPAs**: Add redirect URIs, enable implicit grant flow if necessary\n- **Mobile\u002FDesktop**: Use `http:\u002F\u002Flocalhost` or custom URI scheme\n- **Services**: No redirect URI needed for client credentials flow\n\n### Step 3: Configure API Permissions\n\nGrant your application permission to access Microsoft APIs or your own APIs.\n\n**Common Microsoft Graph Permissions:**\n- `User.Read` - Read user profile\n- `User.ReadWrite.All` - Read and write all users\n- `Directory.Read.All` - Read directory data\n- `Mail.Send` - Send mail as a user\n\n**Details:** See [references\u002Fapi-permissions.md](references\u002Fapi-permissions.md)\n\n### Step 4: Create Client Credentials (if needed)\n\nFor confidential client applications (web apps, services), create a client secret, certificate or federated identity credential.\n\n**Client Secret:**\n- Navigate to \"Certificates & secrets\"\n- Create new client secret\n- Copy the value immediately (only shown once)\n- Store securely (Key Vault recommended)\n\n**Certificate:** For production environments, use certificates instead of secrets for enhanced security. Upload certificate via \"Certificates & secrets\" section.\n\n**Federated Identity Credential:** For dynamically authenticating the confidential client to Entra platform.\n\n### Step 5: Implement OAuth Flow\n\nIntegrate the OAuth flow into your application code.\n\n**See:**\n- [references\u002Foauth-flows.md](references\u002Foauth-flows.md) - OAuth 2.0 flow details\n- [references\u002Fconsole-app-example.md](references\u002Fconsole-app-example.md) - Console app implementation\n\n## Common Patterns\n\n### Pattern 1: First-Time App Registration\n\nWalk user through their first app registration step-by-step.\n\n**Required Information:**\n- Application name\n- Application type (web, SPA, mobile, service)\n- Redirect URIs (if applicable)\n- Required permissions\n\n**Script:** See [references\u002Ffirst-app-registration.md](references\u002Ffirst-app-registration.md)\n\n### Pattern 2: Console Application with User Authentication\n\nCreate a .NET\u002FPython\u002FNode.js console app that authenticates users.\n\n**Required Information:**\n- Programming language (C#, Python, JavaScript, etc.)\n- Authentication library (MSAL recommended)\n- Required permissions\n\n**Example:** See [references\u002Fconsole-app-example.md](references\u002Fconsole-app-example.md)\n\n### Pattern 3: Service-to-Service Authentication\n\nSet up daemon\u002Fservice authentication without user interaction.\n\n**Required Information:**\n- Service\u002Fapp name\n- Target API\u002Fresource\n- Whether to use secret or certificate\n\n**Implementation:** Use Client Credentials flow (see [references\u002Foauth-flows.md#client-credentials-flow](references\u002Foauth-flows.md#client-credentials-flow))\n\n## MCP Tools and CLI\n\n### Azure CLI Commands\n\n| Command | Purpose |\n|---------|---------|\n| `az ad app create` | Create new app registration |\n| `az ad app list` | List app registrations |\n| `az ad app show` | Show app details |\n| `az ad app permission add` | Add API permission |\n| `az ad app credential reset` | Generate new client secret |\n| `az ad sp create` | Create service principal |\n\n**Complete reference:** See [references\u002Fcli-commands.md](references\u002Fcli-commands.md)\n\n### Microsoft Authentication Library (MSAL)\n\nMSAL is the recommended library for integrating Microsoft identity platform.\n\n**Supported Languages:**\n- .NET\u002FC# - `Microsoft.Identity.Client`\n- JavaScript\u002FTypeScript - `@azure\u002Fmsal-browser`, `@azure\u002Fmsal-node`\n- Python - `msal`\n\n**Examples:** See [references\u002Fconsole-app-example.md](references\u002Fconsole-app-example.md)\n\n## Security Best Practices\n\n| Practice | Recommendation |\n|----------|---------------|\n| **Never hardcode secrets** | Use environment variables, Azure Key Vault, or managed identity |\n| **Rotate secrets regularly** | Set expiration, automate rotation |\n| **Use certificates over secrets** | More secure for production |\n| **Least privilege permissions** | Request only required API permissions |\n| **Enable MFA** | Require multi-factor authentication for users |\n| **Use managed identity** | For Azure-hosted apps, avoid secrets entirely |\n| **Validate tokens** | Always validate issuer, audience, expiration |\n| **Use HTTPS only** | All redirect URIs must use HTTPS (except localhost) |\n| **Monitor sign-ins** | Use Entra ID sign-in logs for anomaly detection |\n\n## SDK Quick References\n\n- **Azure Identity**: [Python](references\u002Fsdk\u002Fazure-identity-py.md) | [.NET](references\u002Fsdk\u002Fazure-identity-dotnet.md) | [TypeScript](references\u002Fsdk\u002Fazure-identity-ts.md) | [Java](references\u002Fsdk\u002Fazure-identity-java.md) | [Rust](references\u002Fsdk\u002Fazure-identity-rust.md)\n- **Key Vault (secrets)**: [Python](references\u002Fsdk\u002Fazure-keyvault-py.md) | [TypeScript](references\u002Fsdk\u002Fazure-keyvault-secrets-ts.md)\n- **Auth Events**: [.NET](references\u002Fsdk\u002Fmicrosoft-azure-webjobs-extensions-authentication-events-dotnet.md)\n\n## References\n\n- [OAuth Flows](references\u002Foauth-flows.md) - Detailed OAuth 2.0 flow explanations\n- [CLI Commands](references\u002Fcli-commands.md) - Azure CLI reference for app registrations\n- [Console App Example](references\u002Fconsole-app-example.md) - Complete working examples\n- [First App Registration](references\u002Ffirst-app-registration.md) - Step-by-step guide for beginners\n- [API Permissions](references\u002Fapi-permissions.md) - Understanding and configuring permissions\n- [Troubleshooting](references\u002Ftroubleshooting.md) - Common issues and solutions\n\n## External Resources\n\n- [Microsoft Identity Platform Documentation](https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fidentity-platform\u002F)\n- [OAuth 2.0 and OpenID Connect protocols](https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fidentity-platform\u002Fv2-protocols)\n- [MSAL Documentation](https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fmsal\u002F)\n- [Microsoft Graph API](https:\u002F\u002Flearn.microsoft.com\u002Fgraph\u002F)\n",{"data":41,"body":44},{"name":4,"description":6,"license":31,"metadata":42},{"author":9,"version":43},"1.2.1",{"type":45,"children":46},"root",[47,56,62,69,210,216,302,308,314,319,327,352,379,384,390,395,448,454,459,467,514,528,534,539,547,570,580,590,596,601,609,632,638,644,649,657,680,694,700,705,712,729,742,748,753,760,778,795,801,807,931,944,950,955,963,1007,1020,1026,1192,1198,1280,1286,1349,1355],{"type":48,"tag":49,"props":50,"children":52},"element","h2",{"id":51},"overview",[53],{"type":54,"value":55},"text","Overview",{"type":48,"tag":57,"props":58,"children":59},"p",{},[60],{"type":54,"value":61},"Microsoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud-based identity and access management service. App registrations allow applications to authenticate users and access Azure resources securely.",{"type":48,"tag":63,"props":64,"children":66},"h3",{"id":65},"key-concepts",[67],{"type":54,"value":68},"Key Concepts",{"type":48,"tag":70,"props":71,"children":72},"table",{},[73,92],{"type":48,"tag":74,"props":75,"children":76},"thead",{},[77],{"type":48,"tag":78,"props":79,"children":80},"tr",{},[81,87],{"type":48,"tag":82,"props":83,"children":84},"th",{},[85],{"type":54,"value":86},"Concept",{"type":48,"tag":82,"props":88,"children":89},{},[90],{"type":54,"value":91},"Description",{"type":48,"tag":93,"props":94,"children":95},"tbody",{},[96,114,130,146,162,178,194],{"type":48,"tag":78,"props":97,"children":98},{},[99,109],{"type":48,"tag":100,"props":101,"children":102},"td",{},[103],{"type":48,"tag":104,"props":105,"children":106},"strong",{},[107],{"type":54,"value":108},"App Registration",{"type":48,"tag":100,"props":110,"children":111},{},[112],{"type":54,"value":113},"Configuration that allows an app to use Microsoft identity platform",{"type":48,"tag":78,"props":115,"children":116},{},[117,125],{"type":48,"tag":100,"props":118,"children":119},{},[120],{"type":48,"tag":104,"props":121,"children":122},{},[123],{"type":54,"value":124},"Application (Client) ID",{"type":48,"tag":100,"props":126,"children":127},{},[128],{"type":54,"value":129},"Unique identifier for your application",{"type":48,"tag":78,"props":131,"children":132},{},[133,141],{"type":48,"tag":100,"props":134,"children":135},{},[136],{"type":48,"tag":104,"props":137,"children":138},{},[139],{"type":54,"value":140},"Tenant ID",{"type":48,"tag":100,"props":142,"children":143},{},[144],{"type":54,"value":145},"Unique identifier for your Azure AD tenant\u002Fdirectory",{"type":48,"tag":78,"props":147,"children":148},{},[149,157],{"type":48,"tag":100,"props":150,"children":151},{},[152],{"type":48,"tag":104,"props":153,"children":154},{},[155],{"type":54,"value":156},"Client Secret",{"type":48,"tag":100,"props":158,"children":159},{},[160],{"type":54,"value":161},"Password for the application (confidential clients only)",{"type":48,"tag":78,"props":163,"children":164},{},[165,173],{"type":48,"tag":100,"props":166,"children":167},{},[168],{"type":48,"tag":104,"props":169,"children":170},{},[171],{"type":54,"value":172},"Redirect URI",{"type":48,"tag":100,"props":174,"children":175},{},[176],{"type":54,"value":177},"URL where authentication responses are sent",{"type":48,"tag":78,"props":179,"children":180},{},[181,189],{"type":48,"tag":100,"props":182,"children":183},{},[184],{"type":48,"tag":104,"props":185,"children":186},{},[187],{"type":54,"value":188},"API Permissions",{"type":48,"tag":100,"props":190,"children":191},{},[192],{"type":54,"value":193},"Access scopes your app requests",{"type":48,"tag":78,"props":195,"children":196},{},[197,205],{"type":48,"tag":100,"props":198,"children":199},{},[200],{"type":48,"tag":104,"props":201,"children":202},{},[203],{"type":54,"value":204},"Service Principal",{"type":48,"tag":100,"props":206,"children":207},{},[208],{"type":54,"value":209},"Identity created in your tenant when you register an app",{"type":48,"tag":63,"props":211,"children":213},{"id":212},"application-types",[214],{"type":54,"value":215},"Application Types",{"type":48,"tag":70,"props":217,"children":218},{},[219,235],{"type":48,"tag":74,"props":220,"children":221},{},[222],{"type":48,"tag":78,"props":223,"children":224},{},[225,230],{"type":48,"tag":82,"props":226,"children":227},{},[228],{"type":54,"value":229},"Type",{"type":48,"tag":82,"props":231,"children":232},{},[233],{"type":54,"value":234},"Use Case",{"type":48,"tag":93,"props":236,"children":237},{},[238,254,270,286],{"type":48,"tag":78,"props":239,"children":240},{},[241,249],{"type":48,"tag":100,"props":242,"children":243},{},[244],{"type":48,"tag":104,"props":245,"children":246},{},[247],{"type":54,"value":248},"Web Application",{"type":48,"tag":100,"props":250,"children":251},{},[252],{"type":54,"value":253},"Server-side apps, APIs",{"type":48,"tag":78,"props":255,"children":256},{},[257,265],{"type":48,"tag":100,"props":258,"children":259},{},[260],{"type":48,"tag":104,"props":261,"children":262},{},[263],{"type":54,"value":264},"Single Page App (SPA)",{"type":48,"tag":100,"props":266,"children":267},{},[268],{"type":54,"value":269},"JavaScript\u002FReact\u002FAngular apps",{"type":48,"tag":78,"props":271,"children":272},{},[273,281],{"type":48,"tag":100,"props":274,"children":275},{},[276],{"type":48,"tag":104,"props":277,"children":278},{},[279],{"type":54,"value":280},"Mobile\u002FNative App",{"type":48,"tag":100,"props":282,"children":283},{},[284],{"type":54,"value":285},"Desktop, mobile apps",{"type":48,"tag":78,"props":287,"children":288},{},[289,297],{"type":48,"tag":100,"props":290,"children":291},{},[292],{"type":48,"tag":104,"props":293,"children":294},{},[295],{"type":54,"value":296},"Daemon\u002FService",{"type":48,"tag":100,"props":298,"children":299},{},[300],{"type":54,"value":301},"Background services, APIs",{"type":48,"tag":49,"props":303,"children":305},{"id":304},"core-workflow",[306],{"type":54,"value":307},"Core Workflow",{"type":48,"tag":63,"props":309,"children":311},{"id":310},"step-1-register-the-application",[312],{"type":54,"value":313},"Step 1: Register the Application",{"type":48,"tag":57,"props":315,"children":316},{},[317],{"type":54,"value":318},"Create an app registration in the Azure portal or using Azure CLI.",{"type":48,"tag":57,"props":320,"children":321},{},[322],{"type":48,"tag":104,"props":323,"children":324},{},[325],{"type":54,"value":326},"Portal Method:",{"type":48,"tag":328,"props":329,"children":330},"ol",{},[331,337,342,347],{"type":48,"tag":332,"props":333,"children":334},"li",{},[335],{"type":54,"value":336},"Navigate to Azure Portal → Microsoft Entra ID → App registrations",{"type":48,"tag":332,"props":338,"children":339},{},[340],{"type":54,"value":341},"Click \"New registration\"",{"type":48,"tag":332,"props":343,"children":344},{},[345],{"type":54,"value":346},"Provide name, supported account types, and redirect URI",{"type":48,"tag":332,"props":348,"children":349},{},[350],{"type":54,"value":351},"Click \"Register\"",{"type":48,"tag":57,"props":353,"children":354},{},[355,360,362,368,373,374],{"type":48,"tag":104,"props":356,"children":357},{},[358],{"type":54,"value":359},"CLI Method:",{"type":54,"value":361}," See ",{"type":48,"tag":363,"props":364,"children":366},"a",{"href":365},"references\u002Fcli-commands.md",[367],{"type":54,"value":365},{"type":48,"tag":104,"props":369,"children":370},{},[371],{"type":54,"value":372},"IaC Method:",{"type":54,"value":361},{"type":48,"tag":363,"props":375,"children":377},{"href":376},"references\u002FBICEP-EXAMPLE.bicep",[378],{"type":54,"value":376},{"type":48,"tag":57,"props":380,"children":381},{},[382],{"type":54,"value":383},"It's highly recommended to use the IaC to manage Entra app registration if you already use IaC in your project, need a scalable solution for managing lots of app registrations or need fine-grained audit history of the configuration changes.",{"type":48,"tag":63,"props":385,"children":387},{"id":386},"step-2-configure-authentication",[388],{"type":54,"value":389},"Step 2: Configure Authentication",{"type":48,"tag":57,"props":391,"children":392},{},[393],{"type":54,"value":394},"Set up authentication settings based on your application type.",{"type":48,"tag":396,"props":397,"children":398},"ul",{},[399,409,419,438],{"type":48,"tag":332,"props":400,"children":401},{},[402,407],{"type":48,"tag":104,"props":403,"children":404},{},[405],{"type":54,"value":406},"Web Apps",{"type":54,"value":408},": Add redirect URIs, enable ID tokens if needed",{"type":48,"tag":332,"props":410,"children":411},{},[412,417],{"type":48,"tag":104,"props":413,"children":414},{},[415],{"type":54,"value":416},"SPAs",{"type":54,"value":418},": Add redirect URIs, enable implicit grant flow if necessary",{"type":48,"tag":332,"props":420,"children":421},{},[422,427,429,436],{"type":48,"tag":104,"props":423,"children":424},{},[425],{"type":54,"value":426},"Mobile\u002FDesktop",{"type":54,"value":428},": Use ",{"type":48,"tag":430,"props":431,"children":433},"code",{"className":432},[],[434],{"type":54,"value":435},"http:\u002F\u002Flocalhost",{"type":54,"value":437}," or custom URI scheme",{"type":48,"tag":332,"props":439,"children":440},{},[441,446],{"type":48,"tag":104,"props":442,"children":443},{},[444],{"type":54,"value":445},"Services",{"type":54,"value":447},": No redirect URI needed for client credentials flow",{"type":48,"tag":63,"props":449,"children":451},{"id":450},"step-3-configure-api-permissions",[452],{"type":54,"value":453},"Step 3: Configure API Permissions",{"type":48,"tag":57,"props":455,"children":456},{},[457],{"type":54,"value":458},"Grant your application permission to access Microsoft APIs or your own APIs.",{"type":48,"tag":57,"props":460,"children":461},{},[462],{"type":48,"tag":104,"props":463,"children":464},{},[465],{"type":54,"value":466},"Common Microsoft Graph Permissions:",{"type":48,"tag":396,"props":468,"children":469},{},[470,481,492,503],{"type":48,"tag":332,"props":471,"children":472},{},[473,479],{"type":48,"tag":430,"props":474,"children":476},{"className":475},[],[477],{"type":54,"value":478},"User.Read",{"type":54,"value":480}," - Read user profile",{"type":48,"tag":332,"props":482,"children":483},{},[484,490],{"type":48,"tag":430,"props":485,"children":487},{"className":486},[],[488],{"type":54,"value":489},"User.ReadWrite.All",{"type":54,"value":491}," - Read and write all users",{"type":48,"tag":332,"props":493,"children":494},{},[495,501],{"type":48,"tag":430,"props":496,"children":498},{"className":497},[],[499],{"type":54,"value":500},"Directory.Read.All",{"type":54,"value":502}," - Read directory data",{"type":48,"tag":332,"props":504,"children":505},{},[506,512],{"type":48,"tag":430,"props":507,"children":509},{"className":508},[],[510],{"type":54,"value":511},"Mail.Send",{"type":54,"value":513}," - Send mail as a user",{"type":48,"tag":57,"props":515,"children":516},{},[517,522,523],{"type":48,"tag":104,"props":518,"children":519},{},[520],{"type":54,"value":521},"Details:",{"type":54,"value":361},{"type":48,"tag":363,"props":524,"children":526},{"href":525},"references\u002Fapi-permissions.md",[527],{"type":54,"value":525},{"type":48,"tag":63,"props":529,"children":531},{"id":530},"step-4-create-client-credentials-if-needed",[532],{"type":54,"value":533},"Step 4: Create Client Credentials (if needed)",{"type":48,"tag":57,"props":535,"children":536},{},[537],{"type":54,"value":538},"For confidential client applications (web apps, services), create a client secret, certificate or federated identity credential.",{"type":48,"tag":57,"props":540,"children":541},{},[542],{"type":48,"tag":104,"props":543,"children":544},{},[545],{"type":54,"value":546},"Client Secret:",{"type":48,"tag":396,"props":548,"children":549},{},[550,555,560,565],{"type":48,"tag":332,"props":551,"children":552},{},[553],{"type":54,"value":554},"Navigate to \"Certificates & secrets\"",{"type":48,"tag":332,"props":556,"children":557},{},[558],{"type":54,"value":559},"Create new client secret",{"type":48,"tag":332,"props":561,"children":562},{},[563],{"type":54,"value":564},"Copy the value immediately (only shown once)",{"type":48,"tag":332,"props":566,"children":567},{},[568],{"type":54,"value":569},"Store securely (Key Vault recommended)",{"type":48,"tag":57,"props":571,"children":572},{},[573,578],{"type":48,"tag":104,"props":574,"children":575},{},[576],{"type":54,"value":577},"Certificate:",{"type":54,"value":579}," For production environments, use certificates instead of secrets for enhanced security. Upload certificate via \"Certificates & secrets\" section.",{"type":48,"tag":57,"props":581,"children":582},{},[583,588],{"type":48,"tag":104,"props":584,"children":585},{},[586],{"type":54,"value":587},"Federated Identity Credential:",{"type":54,"value":589}," For dynamically authenticating the confidential client to Entra platform.",{"type":48,"tag":63,"props":591,"children":593},{"id":592},"step-5-implement-oauth-flow",[594],{"type":54,"value":595},"Step 5: Implement OAuth Flow",{"type":48,"tag":57,"props":597,"children":598},{},[599],{"type":54,"value":600},"Integrate the OAuth flow into your application code.",{"type":48,"tag":57,"props":602,"children":603},{},[604],{"type":48,"tag":104,"props":605,"children":606},{},[607],{"type":54,"value":608},"See:",{"type":48,"tag":396,"props":610,"children":611},{},[612,622],{"type":48,"tag":332,"props":613,"children":614},{},[615,620],{"type":48,"tag":363,"props":616,"children":618},{"href":617},"references\u002Foauth-flows.md",[619],{"type":54,"value":617},{"type":54,"value":621}," - OAuth 2.0 flow details",{"type":48,"tag":332,"props":623,"children":624},{},[625,630],{"type":48,"tag":363,"props":626,"children":628},{"href":627},"references\u002Fconsole-app-example.md",[629],{"type":54,"value":627},{"type":54,"value":631}," - Console app implementation",{"type":48,"tag":49,"props":633,"children":635},{"id":634},"common-patterns",[636],{"type":54,"value":637},"Common Patterns",{"type":48,"tag":63,"props":639,"children":641},{"id":640},"pattern-1-first-time-app-registration",[642],{"type":54,"value":643},"Pattern 1: First-Time App Registration",{"type":48,"tag":57,"props":645,"children":646},{},[647],{"type":54,"value":648},"Walk user through their first app registration step-by-step.",{"type":48,"tag":57,"props":650,"children":651},{},[652],{"type":48,"tag":104,"props":653,"children":654},{},[655],{"type":54,"value":656},"Required Information:",{"type":48,"tag":396,"props":658,"children":659},{},[660,665,670,675],{"type":48,"tag":332,"props":661,"children":662},{},[663],{"type":54,"value":664},"Application name",{"type":48,"tag":332,"props":666,"children":667},{},[668],{"type":54,"value":669},"Application type (web, SPA, mobile, service)",{"type":48,"tag":332,"props":671,"children":672},{},[673],{"type":54,"value":674},"Redirect URIs (if applicable)",{"type":48,"tag":332,"props":676,"children":677},{},[678],{"type":54,"value":679},"Required permissions",{"type":48,"tag":57,"props":681,"children":682},{},[683,688,689],{"type":48,"tag":104,"props":684,"children":685},{},[686],{"type":54,"value":687},"Script:",{"type":54,"value":361},{"type":48,"tag":363,"props":690,"children":692},{"href":691},"references\u002Ffirst-app-registration.md",[693],{"type":54,"value":691},{"type":48,"tag":63,"props":695,"children":697},{"id":696},"pattern-2-console-application-with-user-authentication",[698],{"type":54,"value":699},"Pattern 2: Console Application with User Authentication",{"type":48,"tag":57,"props":701,"children":702},{},[703],{"type":54,"value":704},"Create a .NET\u002FPython\u002FNode.js console app that authenticates users.",{"type":48,"tag":57,"props":706,"children":707},{},[708],{"type":48,"tag":104,"props":709,"children":710},{},[711],{"type":54,"value":656},{"type":48,"tag":396,"props":713,"children":714},{},[715,720,725],{"type":48,"tag":332,"props":716,"children":717},{},[718],{"type":54,"value":719},"Programming language (C#, Python, JavaScript, etc.)",{"type":48,"tag":332,"props":721,"children":722},{},[723],{"type":54,"value":724},"Authentication library (MSAL recommended)",{"type":48,"tag":332,"props":726,"children":727},{},[728],{"type":54,"value":679},{"type":48,"tag":57,"props":730,"children":731},{},[732,737,738],{"type":48,"tag":104,"props":733,"children":734},{},[735],{"type":54,"value":736},"Example:",{"type":54,"value":361},{"type":48,"tag":363,"props":739,"children":740},{"href":627},[741],{"type":54,"value":627},{"type":48,"tag":63,"props":743,"children":745},{"id":744},"pattern-3-service-to-service-authentication",[746],{"type":54,"value":747},"Pattern 3: Service-to-Service Authentication",{"type":48,"tag":57,"props":749,"children":750},{},[751],{"type":54,"value":752},"Set up daemon\u002Fservice authentication without user interaction.",{"type":48,"tag":57,"props":754,"children":755},{},[756],{"type":48,"tag":104,"props":757,"children":758},{},[759],{"type":54,"value":656},{"type":48,"tag":396,"props":761,"children":762},{},[763,768,773],{"type":48,"tag":332,"props":764,"children":765},{},[766],{"type":54,"value":767},"Service\u002Fapp name",{"type":48,"tag":332,"props":769,"children":770},{},[771],{"type":54,"value":772},"Target API\u002Fresource",{"type":48,"tag":332,"props":774,"children":775},{},[776],{"type":54,"value":777},"Whether to use secret or certificate",{"type":48,"tag":57,"props":779,"children":780},{},[781,786,788,793],{"type":48,"tag":104,"props":782,"children":783},{},[784],{"type":54,"value":785},"Implementation:",{"type":54,"value":787}," Use Client Credentials flow (see ",{"type":48,"tag":363,"props":789,"children":791},{"href":790},"references\u002Foauth-flows.md#client-credentials-flow",[792],{"type":54,"value":790},{"type":54,"value":794},")",{"type":48,"tag":49,"props":796,"children":798},{"id":797},"mcp-tools-and-cli",[799],{"type":54,"value":800},"MCP Tools and CLI",{"type":48,"tag":63,"props":802,"children":804},{"id":803},"azure-cli-commands",[805],{"type":54,"value":806},"Azure CLI Commands",{"type":48,"tag":70,"props":808,"children":809},{},[810,826],{"type":48,"tag":74,"props":811,"children":812},{},[813],{"type":48,"tag":78,"props":814,"children":815},{},[816,821],{"type":48,"tag":82,"props":817,"children":818},{},[819],{"type":54,"value":820},"Command",{"type":48,"tag":82,"props":822,"children":823},{},[824],{"type":54,"value":825},"Purpose",{"type":48,"tag":93,"props":827,"children":828},{},[829,846,863,880,897,914],{"type":48,"tag":78,"props":830,"children":831},{},[832,841],{"type":48,"tag":100,"props":833,"children":834},{},[835],{"type":48,"tag":430,"props":836,"children":838},{"className":837},[],[839],{"type":54,"value":840},"az ad app create",{"type":48,"tag":100,"props":842,"children":843},{},[844],{"type":54,"value":845},"Create new app registration",{"type":48,"tag":78,"props":847,"children":848},{},[849,858],{"type":48,"tag":100,"props":850,"children":851},{},[852],{"type":48,"tag":430,"props":853,"children":855},{"className":854},[],[856],{"type":54,"value":857},"az ad app list",{"type":48,"tag":100,"props":859,"children":860},{},[861],{"type":54,"value":862},"List app registrations",{"type":48,"tag":78,"props":864,"children":865},{},[866,875],{"type":48,"tag":100,"props":867,"children":868},{},[869],{"type":48,"tag":430,"props":870,"children":872},{"className":871},[],[873],{"type":54,"value":874},"az ad app show",{"type":48,"tag":100,"props":876,"children":877},{},[878],{"type":54,"value":879},"Show app details",{"type":48,"tag":78,"props":881,"children":882},{},[883,892],{"type":48,"tag":100,"props":884,"children":885},{},[886],{"type":48,"tag":430,"props":887,"children":889},{"className":888},[],[890],{"type":54,"value":891},"az ad app permission add",{"type":48,"tag":100,"props":893,"children":894},{},[895],{"type":54,"value":896},"Add API permission",{"type":48,"tag":78,"props":898,"children":899},{},[900,909],{"type":48,"tag":100,"props":901,"children":902},{},[903],{"type":48,"tag":430,"props":904,"children":906},{"className":905},[],[907],{"type":54,"value":908},"az ad app credential reset",{"type":48,"tag":100,"props":910,"children":911},{},[912],{"type":54,"value":913},"Generate new client secret",{"type":48,"tag":78,"props":915,"children":916},{},[917,926],{"type":48,"tag":100,"props":918,"children":919},{},[920],{"type":48,"tag":430,"props":921,"children":923},{"className":922},[],[924],{"type":54,"value":925},"az ad sp create",{"type":48,"tag":100,"props":927,"children":928},{},[929],{"type":54,"value":930},"Create service principal",{"type":48,"tag":57,"props":932,"children":933},{},[934,939,940],{"type":48,"tag":104,"props":935,"children":936},{},[937],{"type":54,"value":938},"Complete reference:",{"type":54,"value":361},{"type":48,"tag":363,"props":941,"children":942},{"href":365},[943],{"type":54,"value":365},{"type":48,"tag":63,"props":945,"children":947},{"id":946},"microsoft-authentication-library-msal",[948],{"type":54,"value":949},"Microsoft Authentication Library (MSAL)",{"type":48,"tag":57,"props":951,"children":952},{},[953],{"type":54,"value":954},"MSAL is the recommended library for integrating Microsoft identity platform.",{"type":48,"tag":57,"props":956,"children":957},{},[958],{"type":48,"tag":104,"props":959,"children":960},{},[961],{"type":54,"value":962},"Supported Languages:",{"type":48,"tag":396,"props":964,"children":965},{},[966,977,996],{"type":48,"tag":332,"props":967,"children":968},{},[969,971],{"type":54,"value":970},".NET\u002FC# - ",{"type":48,"tag":430,"props":972,"children":974},{"className":973},[],[975],{"type":54,"value":976},"Microsoft.Identity.Client",{"type":48,"tag":332,"props":978,"children":979},{},[980,982,988,990],{"type":54,"value":981},"JavaScript\u002FTypeScript - ",{"type":48,"tag":430,"props":983,"children":985},{"className":984},[],[986],{"type":54,"value":987},"@azure\u002Fmsal-browser",{"type":54,"value":989},", ",{"type":48,"tag":430,"props":991,"children":993},{"className":992},[],[994],{"type":54,"value":995},"@azure\u002Fmsal-node",{"type":48,"tag":332,"props":997,"children":998},{},[999,1001],{"type":54,"value":1000},"Python - ",{"type":48,"tag":430,"props":1002,"children":1004},{"className":1003},[],[1005],{"type":54,"value":1006},"msal",{"type":48,"tag":57,"props":1008,"children":1009},{},[1010,1015,1016],{"type":48,"tag":104,"props":1011,"children":1012},{},[1013],{"type":54,"value":1014},"Examples:",{"type":54,"value":361},{"type":48,"tag":363,"props":1017,"children":1018},{"href":627},[1019],{"type":54,"value":627},{"type":48,"tag":49,"props":1021,"children":1023},{"id":1022},"security-best-practices",[1024],{"type":54,"value":1025},"Security Best Practices",{"type":48,"tag":70,"props":1027,"children":1028},{},[1029,1045],{"type":48,"tag":74,"props":1030,"children":1031},{},[1032],{"type":48,"tag":78,"props":1033,"children":1034},{},[1035,1040],{"type":48,"tag":82,"props":1036,"children":1037},{},[1038],{"type":54,"value":1039},"Practice",{"type":48,"tag":82,"props":1041,"children":1042},{},[1043],{"type":54,"value":1044},"Recommendation",{"type":48,"tag":93,"props":1046,"children":1047},{},[1048,1064,1080,1096,1112,1128,1144,1160,1176],{"type":48,"tag":78,"props":1049,"children":1050},{},[1051,1059],{"type":48,"tag":100,"props":1052,"children":1053},{},[1054],{"type":48,"tag":104,"props":1055,"children":1056},{},[1057],{"type":54,"value":1058},"Never hardcode secrets",{"type":48,"tag":100,"props":1060,"children":1061},{},[1062],{"type":54,"value":1063},"Use environment variables, Azure Key Vault, or managed identity",{"type":48,"tag":78,"props":1065,"children":1066},{},[1067,1075],{"type":48,"tag":100,"props":1068,"children":1069},{},[1070],{"type":48,"tag":104,"props":1071,"children":1072},{},[1073],{"type":54,"value":1074},"Rotate secrets regularly",{"type":48,"tag":100,"props":1076,"children":1077},{},[1078],{"type":54,"value":1079},"Set expiration, automate rotation",{"type":48,"tag":78,"props":1081,"children":1082},{},[1083,1091],{"type":48,"tag":100,"props":1084,"children":1085},{},[1086],{"type":48,"tag":104,"props":1087,"children":1088},{},[1089],{"type":54,"value":1090},"Use certificates over secrets",{"type":48,"tag":100,"props":1092,"children":1093},{},[1094],{"type":54,"value":1095},"More secure for production",{"type":48,"tag":78,"props":1097,"children":1098},{},[1099,1107],{"type":48,"tag":100,"props":1100,"children":1101},{},[1102],{"type":48,"tag":104,"props":1103,"children":1104},{},[1105],{"type":54,"value":1106},"Least privilege permissions",{"type":48,"tag":100,"props":1108,"children":1109},{},[1110],{"type":54,"value":1111},"Request only required API permissions",{"type":48,"tag":78,"props":1113,"children":1114},{},[1115,1123],{"type":48,"tag":100,"props":1116,"children":1117},{},[1118],{"type":48,"tag":104,"props":1119,"children":1120},{},[1121],{"type":54,"value":1122},"Enable MFA",{"type":48,"tag":100,"props":1124,"children":1125},{},[1126],{"type":54,"value":1127},"Require multi-factor authentication for users",{"type":48,"tag":78,"props":1129,"children":1130},{},[1131,1139],{"type":48,"tag":100,"props":1132,"children":1133},{},[1134],{"type":48,"tag":104,"props":1135,"children":1136},{},[1137],{"type":54,"value":1138},"Use managed identity",{"type":48,"tag":100,"props":1140,"children":1141},{},[1142],{"type":54,"value":1143},"For Azure-hosted apps, avoid secrets entirely",{"type":48,"tag":78,"props":1145,"children":1146},{},[1147,1155],{"type":48,"tag":100,"props":1148,"children":1149},{},[1150],{"type":48,"tag":104,"props":1151,"children":1152},{},[1153],{"type":54,"value":1154},"Validate tokens",{"type":48,"tag":100,"props":1156,"children":1157},{},[1158],{"type":54,"value":1159},"Always validate issuer, audience, expiration",{"type":48,"tag":78,"props":1161,"children":1162},{},[1163,1171],{"type":48,"tag":100,"props":1164,"children":1165},{},[1166],{"type":48,"tag":104,"props":1167,"children":1168},{},[1169],{"type":54,"value":1170},"Use HTTPS only",{"type":48,"tag":100,"props":1172,"children":1173},{},[1174],{"type":54,"value":1175},"All redirect URIs must use HTTPS (except localhost)",{"type":48,"tag":78,"props":1177,"children":1178},{},[1179,1187],{"type":48,"tag":100,"props":1180,"children":1181},{},[1182],{"type":48,"tag":104,"props":1183,"children":1184},{},[1185],{"type":54,"value":1186},"Monitor sign-ins",{"type":48,"tag":100,"props":1188,"children":1189},{},[1190],{"type":54,"value":1191},"Use Entra ID sign-in logs for anomaly detection",{"type":48,"tag":49,"props":1193,"children":1195},{"id":1194},"sdk-quick-references",[1196],{"type":54,"value":1197},"SDK Quick References",{"type":48,"tag":396,"props":1199,"children":1200},{},[1201,1246,1266],{"type":48,"tag":332,"props":1202,"children":1203},{},[1204,1209,1211,1217,1219,1225,1226,1232,1233,1239,1240],{"type":48,"tag":104,"props":1205,"children":1206},{},[1207],{"type":54,"value":1208},"Azure Identity",{"type":54,"value":1210},": ",{"type":48,"tag":363,"props":1212,"children":1214},{"href":1213},"references\u002Fsdk\u002Fazure-identity-py.md",[1215],{"type":54,"value":1216},"Python",{"type":54,"value":1218}," | ",{"type":48,"tag":363,"props":1220,"children":1222},{"href":1221},"references\u002Fsdk\u002Fazure-identity-dotnet.md",[1223],{"type":54,"value":1224},".NET",{"type":54,"value":1218},{"type":48,"tag":363,"props":1227,"children":1229},{"href":1228},"references\u002Fsdk\u002Fazure-identity-ts.md",[1230],{"type":54,"value":1231},"TypeScript",{"type":54,"value":1218},{"type":48,"tag":363,"props":1234,"children":1236},{"href":1235},"references\u002Fsdk\u002Fazure-identity-java.md",[1237],{"type":54,"value":1238},"Java",{"type":54,"value":1218},{"type":48,"tag":363,"props":1241,"children":1243},{"href":1242},"references\u002Fsdk\u002Fazure-identity-rust.md",[1244],{"type":54,"value":1245},"Rust",{"type":48,"tag":332,"props":1247,"children":1248},{},[1249,1254,1255,1260,1261],{"type":48,"tag":104,"props":1250,"children":1251},{},[1252],{"type":54,"value":1253},"Key Vault (secrets)",{"type":54,"value":1210},{"type":48,"tag":363,"props":1256,"children":1258},{"href":1257},"references\u002Fsdk\u002Fazure-keyvault-py.md",[1259],{"type":54,"value":1216},{"type":54,"value":1218},{"type":48,"tag":363,"props":1262,"children":1264},{"href":1263},"references\u002Fsdk\u002Fazure-keyvault-secrets-ts.md",[1265],{"type":54,"value":1231},{"type":48,"tag":332,"props":1267,"children":1268},{},[1269,1274,1275],{"type":48,"tag":104,"props":1270,"children":1271},{},[1272],{"type":54,"value":1273},"Auth Events",{"type":54,"value":1210},{"type":48,"tag":363,"props":1276,"children":1278},{"href":1277},"references\u002Fsdk\u002Fmicrosoft-azure-webjobs-extensions-authentication-events-dotnet.md",[1279],{"type":54,"value":1224},{"type":48,"tag":49,"props":1281,"children":1283},{"id":1282},"references",[1284],{"type":54,"value":1285},"References",{"type":48,"tag":396,"props":1287,"children":1288},{},[1289,1299,1309,1319,1329,1338],{"type":48,"tag":332,"props":1290,"children":1291},{},[1292,1297],{"type":48,"tag":363,"props":1293,"children":1294},{"href":617},[1295],{"type":54,"value":1296},"OAuth Flows",{"type":54,"value":1298}," - Detailed OAuth 2.0 flow explanations",{"type":48,"tag":332,"props":1300,"children":1301},{},[1302,1307],{"type":48,"tag":363,"props":1303,"children":1304},{"href":365},[1305],{"type":54,"value":1306},"CLI Commands",{"type":54,"value":1308}," - Azure CLI reference for app registrations",{"type":48,"tag":332,"props":1310,"children":1311},{},[1312,1317],{"type":48,"tag":363,"props":1313,"children":1314},{"href":627},[1315],{"type":54,"value":1316},"Console App Example",{"type":54,"value":1318}," - Complete working examples",{"type":48,"tag":332,"props":1320,"children":1321},{},[1322,1327],{"type":48,"tag":363,"props":1323,"children":1324},{"href":691},[1325],{"type":54,"value":1326},"First App Registration",{"type":54,"value":1328}," - Step-by-step guide for beginners",{"type":48,"tag":332,"props":1330,"children":1331},{},[1332,1336],{"type":48,"tag":363,"props":1333,"children":1334},{"href":525},[1335],{"type":54,"value":188},{"type":54,"value":1337}," - Understanding and configuring permissions",{"type":48,"tag":332,"props":1339,"children":1340},{},[1341,1347],{"type":48,"tag":363,"props":1342,"children":1344},{"href":1343},"references\u002Ftroubleshooting.md",[1345],{"type":54,"value":1346},"Troubleshooting",{"type":54,"value":1348}," - Common issues and solutions",{"type":48,"tag":49,"props":1350,"children":1352},{"id":1351},"external-resources",[1353],{"type":54,"value":1354},"External Resources",{"type":48,"tag":396,"props":1356,"children":1357},{},[1358,1369,1379,1389],{"type":48,"tag":332,"props":1359,"children":1360},{},[1361],{"type":48,"tag":363,"props":1362,"children":1366},{"href":1363,"rel":1364},"https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fidentity-platform\u002F",[1365],"nofollow",[1367],{"type":54,"value":1368},"Microsoft Identity Platform Documentation",{"type":48,"tag":332,"props":1370,"children":1371},{},[1372],{"type":48,"tag":363,"props":1373,"children":1376},{"href":1374,"rel":1375},"https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fidentity-platform\u002Fv2-protocols",[1365],[1377],{"type":54,"value":1378},"OAuth 2.0 and OpenID Connect protocols",{"type":48,"tag":332,"props":1380,"children":1381},{},[1382],{"type":48,"tag":363,"props":1383,"children":1386},{"href":1384,"rel":1385},"https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fmsal\u002F",[1365],[1387],{"type":54,"value":1388},"MSAL Documentation",{"type":48,"tag":332,"props":1390,"children":1391},{},[1392],{"type":48,"tag":363,"props":1393,"children":1396},{"href":1394,"rel":1395},"https:\u002F\u002Flearn.microsoft.com\u002Fgraph\u002F",[1365],[1397],{"type":54,"value":1398},"Microsoft Graph API",{"items":1400,"total":1528},[1401,1421,1435,1456,1475,1492,1510],{"slug":1402,"name":1402,"fn":1403,"description":1404,"org":1405,"tags":1406,"stars":28,"repoUrl":29,"updatedAt":1420},"airunway-aks-setup","set up AI Runway on Azure Kubernetes Service","Set up AI Runway on AKS — from bare cluster to running model. Covers cluster verification, controller install, GPU assessment, provider setup, and first deployment. WHEN: \"setup AI Runway\", \"onboard AKS cluster\", \"install AI Runway\", \"airunway setup\", \"deploy model to AKS\", \"GPU inference on AKS\", \"KAITO setup on AKS\", \"run LLM on AKS\", \"vLLM on AKS\", \"set up model serving on AKS\", \"AI Runway controller\".",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1407,1410,1411,1414,1417],{"name":1408,"slug":1409,"type":15},"AI Infrastructure","ai-infrastructure",{"name":17,"slug":18,"type":15},{"name":1412,"slug":1413,"type":15},"Deployment","deployment",{"name":1415,"slug":1416,"type":15},"Kubernetes","kubernetes",{"name":1418,"slug":1419,"type":15},"Runway","runway","2026-07-31T05:56:13.054971",{"slug":1422,"name":1422,"fn":1423,"description":1424,"org":1425,"tags":1426,"stars":28,"repoUrl":29,"updatedAt":1434},"appinsights-instrumentation","instrument webapps with Azure Application Insights","Guidance for instrumenting webapps with Azure Application Insights. Provides telemetry patterns, SDK setup, and configuration references. WHEN: how to instrument app, App Insights SDK, telemetry patterns, what is App Insights, Application Insights guidance, instrumentation examples, APM best practices.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1427,1428,1431],{"name":17,"slug":18,"type":15},{"name":1429,"slug":1430,"type":15},"Monitoring","monitoring",{"name":1432,"slug":1433,"type":15},"Observability","observability","2026-07-31T05:56:09.068625",{"slug":1436,"name":1436,"fn":1437,"description":1438,"org":1439,"tags":1440,"stars":28,"repoUrl":29,"updatedAt":1455},"azure-ai","build applications with Azure AI services","Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector\u002Fhybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1441,1442,1443,1446,1449,1452],{"name":1408,"slug":1409,"type":15},{"name":17,"slug":18,"type":15},{"name":1444,"slug":1445,"type":15},"LLM","llm",{"name":1447,"slug":1448,"type":15},"OpenAI","openai",{"name":1450,"slug":1451,"type":15},"Search","search",{"name":1453,"slug":1454,"type":15},"Speech","speech","2026-07-31T05:56:19.069133",{"slug":1457,"name":1457,"fn":1458,"description":1459,"org":1460,"tags":1461,"stars":28,"repoUrl":29,"updatedAt":1474},"azure-aigateway","configure Azure API Management as an AI Gateway","Configure Azure API Management as an AI Gateway for AI models, MCP tools, and agents. WHEN: semantic caching, token limit, content safety, load balancing, AI model governance, MCP rate limiting, jailbreak detection, add Azure OpenAI backend, add AI Foundry model, test AI gateway, LLM policies, configure AI backend, token metrics, AI cost control, convert API to MCP, import OpenAPI to gateway.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1462,1463,1466,1467,1470,1473],{"name":1408,"slug":1409,"type":15},{"name":1464,"slug":1465,"type":15},"API Development","api-development",{"name":17,"slug":18,"type":15},{"name":1468,"slug":1469,"type":15},"Caching","caching",{"name":1471,"slug":1472,"type":15},"Governance","governance",{"name":13,"slug":14,"type":15},"2026-07-31T05:56:23.05242",{"slug":1476,"name":1476,"fn":1477,"description":1478,"org":1479,"tags":1480,"stars":28,"repoUrl":29,"updatedAt":1491},"azure-cloud-migrate","migrate cross-cloud workloads to Azure","Assess and migrate cross-cloud workloads to Azure with reports and code conversion. Supports Lambda→Functions, Beanstalk\u002FHeroku\u002FApp Engine→App Service, Fargate\u002FKubernetes\u002FCloud Run\u002FSpring Boot→Container Apps. WHEN: migrate Lambda to Functions, AWS to Azure, migrate Beanstalk, migrate Heroku, migrate App Engine, Cloud Run migration, Fargate to ACA, ECS\u002FKubernetes\u002FGKE\u002FEKS to Container Apps, Spring Boot to Container Apps, cross-cloud migration.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1481,1484,1485,1488],{"name":1482,"slug":1483,"type":15},"AWS","aws",{"name":17,"slug":18,"type":15},{"name":1486,"slug":1487,"type":15},"Google Cloud","google-cloud",{"name":1489,"slug":1490,"type":15},"Migration","migration","2026-07-31T05:56:29.049979",{"slug":1493,"name":1493,"fn":1494,"description":1495,"org":1496,"tags":1497,"stars":28,"repoUrl":29,"updatedAt":1509},"azure-compliance","audit Azure compliance and security","Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy\u002Fcompliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1498,1501,1502,1505,1508],{"name":1499,"slug":1500,"type":15},"Audit","audit",{"name":17,"slug":18,"type":15},{"name":1503,"slug":1504,"type":15},"Compliance","compliance",{"name":1506,"slug":1507,"type":15},"Regulatory Compliance","regulatory-compliance",{"name":13,"slug":14,"type":15},"2026-07-31T05:56:11.06797",{"slug":1511,"name":1511,"fn":1512,"description":1513,"org":1514,"tags":1515,"stars":28,"repoUrl":29,"updatedAt":1527},"azure-compute","manage and optimize Azure compute resources","Azure VM\u002FVMSS router. WHEN: create \u002F provision \u002F deploy \u002F spin-up VM, recommend VM size, compare VM pricing, VMSS, scale set, autoscale, burstable, lightweight server, website, backend, GPU, machine learning, HPC simulation, dev\u002Ftest, workload, family, load balancer, Flexible orchestration, Uniform orchestration, cost estimate, capacity reservation (CRG), reserve, guarantee capacity, pre-provision, CRG association, CRG disassociation, machine enrollment (EMM), Essential Machine Management, monitor. PREFER OVER mcp__azure__get_azure_bestpractices for VM create intents — use compute_vm_list-skus \u002F compute_vm_list-images \u002F compute_vm_check-quota.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1516,1517,1518,1521,1524],{"name":1408,"slug":1409,"type":15},{"name":17,"slug":18,"type":15},{"name":1519,"slug":1520,"type":15},"Cost Optimization","cost-optimization",{"name":1522,"slug":1523,"type":15},"Performance","performance",{"name":1525,"slug":1526,"type":15},"Virtual Machines","virtual-machines","2026-07-31T05:56:16.042469",28,{"items":1530,"total":1706},[1531,1553,1569,1587,1598,1612,1623,1634,1649,1664,1682,1694],{"slug":1532,"name":1532,"fn":1533,"description":1534,"org":1535,"tags":1536,"stars":1550,"repoUrl":1551,"updatedAt":1552},"rushstack-best-practices","manage Rush monorepos with best practices","Provides best practices and guidance for working with Rush monorepos. Use when the user is working in a Rush-based repository, asks about Rush commands (install, update, build, rebuild), needs help with project selection, dependency management, build caching, subspace configuration, or troubleshooting Rush-specific issues.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1537,1540,1543,1544,1547],{"name":1538,"slug":1539,"type":15},"Engineering","engineering",{"name":1541,"slug":1542,"type":15},"Local Development","local-development",{"name":9,"slug":8,"type":15},{"name":1545,"slug":1546,"type":15},"Project Management","project-management",{"name":1548,"slug":1549,"type":15},"Rush","rush",6484,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Frushstack","2026-04-06T18:34:44.965032",{"slug":1554,"name":1554,"fn":1555,"description":1556,"org":1557,"tags":1558,"stars":1566,"repoUrl":1567,"updatedAt":1568},"azure-ai-agents-persistent-dotnet","build AI agents with Azure .NET SDK","Azure AI Agents Persistent SDK for .NET. Low-level SDK for creating and managing AI agents with threads, messages, runs, and tools. Use for agent CRUD, conversation threads, streaming responses, function calling, file search, and code interpreter. Triggers: \"PersistentAgentsClient\", \"persistent agents\", \"agent threads\", \"agent runs\", \"streaming agents\", \"function calling agents .NET\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1559,1561,1564,1565],{"name":1224,"slug":1560,"type":15},"net",{"name":1562,"slug":1563,"type":15},"Agents","agents",{"name":17,"slug":18,"type":15},{"name":1444,"slug":1445,"type":15},2804,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fskills","2026-07-03T16:32:10.297433",{"slug":1570,"name":1570,"fn":1571,"description":1572,"org":1573,"tags":1574,"stars":1566,"repoUrl":1567,"updatedAt":1586},"azure-ai-anomalydetector-java","build anomaly detection applications with Java","Build anomaly detection applications with Azure AI Anomaly Detector SDK for Java. Use when implementing univariate\u002Fmultivariate anomaly detection, time-series analysis, or AI-powered monitoring.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1575,1578,1579,1582,1584,1585],{"name":1576,"slug":1577,"type":15},"Analytics","analytics",{"name":17,"slug":18,"type":15},{"name":1580,"slug":1581,"type":15},"Data Analysis","data-analysis",{"name":1238,"slug":1583,"type":15},"java",{"name":9,"slug":8,"type":15},{"name":1429,"slug":1430,"type":15},"2026-05-13T06:14:16.261754",{"slug":1588,"name":1588,"fn":1589,"description":1590,"org":1591,"tags":1592,"stars":1566,"repoUrl":1567,"updatedAt":1597},"azure-ai-contentsafety-java","build content moderation applications with Azure AI","Build content moderation applications with Azure AI Content Safety SDK for Java. Use when implementing text\u002Fimage analysis, blocklist management, or harm detection for hate, violence, sexual content, and self-harm.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1593,1594,1595,1596],{"name":1408,"slug":1409,"type":15},{"name":17,"slug":18,"type":15},{"name":1238,"slug":1583,"type":15},{"name":13,"slug":14,"type":15},"2026-07-07T06:53:31.293235",{"slug":1599,"name":1599,"fn":1600,"description":1601,"org":1602,"tags":1603,"stars":1566,"repoUrl":1567,"updatedAt":1611},"azure-ai-contentsafety-py","detect harmful content with Azure AI Content Safety","Azure AI Content Safety SDK for Python. Use for detecting harmful content in text and images with multi-severity classification.\nTriggers: \"azure-ai-contentsafety\", \"ContentSafetyClient\", \"content moderation\", \"harmful content\", \"text analysis\", \"image analysis\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1604,1605,1606,1607,1608,1610],{"name":17,"slug":18,"type":15},{"name":1503,"slug":1504,"type":15},{"name":1444,"slug":1445,"type":15},{"name":9,"slug":8,"type":15},{"name":1216,"slug":1609,"type":15},"python",{"name":13,"slug":14,"type":15},"2026-07-18T05:14:23.017504",{"slug":1613,"name":1613,"fn":1614,"description":1615,"org":1616,"tags":1617,"stars":1566,"repoUrl":1567,"updatedAt":1622},"azure-ai-language-conversations-py","implement conversational language understanding with Python","Implement Conversational Language Understanding (CLU) using the azure-ai-language-conversations Python SDK. Use when working with ConversationAnalysisClient to analyze conversation intent and entities, building NLP features, or integrating language understanding into applications.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1618,1619,1620,1621],{"name":1576,"slug":1577,"type":15},{"name":17,"slug":18,"type":15},{"name":1444,"slug":1445,"type":15},{"name":1216,"slug":1609,"type":15},"2026-07-31T05:54:29.068751",{"slug":1624,"name":1624,"fn":1625,"description":1626,"org":1627,"tags":1628,"stars":1566,"repoUrl":1567,"updatedAt":1633},"azure-ai-translation-text-py","translate text using Azure AI services","Azure AI Text Translation SDK for real-time text translation, transliteration, language detection, and dictionary lookup. Use for translating text content in applications.\nTriggers: \"text translation\", \"translator\", \"translate text\", \"transliterate\", \"TextTranslationClient\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1629,1630,1631,1632],{"name":1464,"slug":1465,"type":15},{"name":17,"slug":18,"type":15},{"name":9,"slug":8,"type":15},{"name":1216,"slug":1609,"type":15},"2026-07-18T05:14:16.988376",{"slug":1635,"name":1635,"fn":1636,"description":1637,"org":1638,"tags":1639,"stars":1566,"repoUrl":1567,"updatedAt":1648},"azure-ai-vision-imageanalysis-py","analyze images with Azure AI Vision","Azure AI Vision Image Analysis SDK for captions, tags, objects, OCR, people detection, and smart cropping. Use for computer vision and image understanding tasks.\nTriggers: \"image analysis\", \"computer vision\", \"OCR\", \"object detection\", \"ImageAnalysisClient\", \"image caption\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1640,1641,1644,1647],{"name":17,"slug":18,"type":15},{"name":1642,"slug":1643,"type":15},"Computer Vision","computer-vision",{"name":1645,"slug":1646,"type":15},"Images","images",{"name":1216,"slug":1609,"type":15},"2026-07-18T05:14:18.007737",{"slug":1650,"name":1650,"fn":1651,"description":1652,"org":1653,"tags":1654,"stars":1566,"repoUrl":1567,"updatedAt":1663},"azure-appconfiguration-java","manage configuration with Azure App Configuration","Azure App Configuration SDK for Java. Centralized application configuration management with key-value settings, feature flags, and snapshots.\nTriggers: \"ConfigurationClient java\", \"app configuration java\", \"feature flag java\", \"configuration setting java\", \"azure config java\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1655,1656,1659,1662],{"name":17,"slug":18,"type":15},{"name":1657,"slug":1658,"type":15},"Configuration","configuration",{"name":1660,"slug":1661,"type":15},"Feature Flags","feature-flags",{"name":1238,"slug":1583,"type":15},"2026-07-03T16:32:01.278468",{"slug":1665,"name":1665,"fn":1666,"description":1667,"org":1668,"tags":1669,"stars":1566,"repoUrl":1567,"updatedAt":1681},"azure-cosmos-rust","build applications with Azure Cosmos DB","Azure Cosmos DB library for Rust (NoSQL API). Document CRUD, containers, and globally distributed data.\nTriggers: \"cosmos db rust\", \"CosmosClient rust\", \"document crud rust\", \"NoSQL rust\", \"partition key rust\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1670,1673,1676,1679],{"name":1671,"slug":1672,"type":15},"Cosmos DB","cosmos-db",{"name":1674,"slug":1675,"type":15},"Database","database",{"name":1677,"slug":1678,"type":15},"NoSQL","nosql",{"name":1245,"slug":1680,"type":15},"rust","2026-07-31T05:54:27.021432",{"slug":1683,"name":1683,"fn":1666,"description":1684,"org":1685,"tags":1686,"stars":1566,"repoUrl":1567,"updatedAt":1693},"azure-cosmos-ts","Azure Cosmos DB JavaScript\u002FTypeScript SDK (@azure\u002Fcosmos) for data plane operations. Use for CRUD operations on documents, queries, bulk operations, and container management. Triggers: \"Cosmos DB\", \"@azure\u002Fcosmos\", \"CosmosClient\", \"document CRUD\", \"NoSQL queries\", \"bulk operations\", \"partition key\", \"container.items\".\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1687,1688,1689,1690,1691],{"name":1671,"slug":1672,"type":15},{"name":1674,"slug":1675,"type":15},{"name":9,"slug":8,"type":15},{"name":1677,"slug":1678,"type":15},{"name":1231,"slug":1692,"type":15},"typescript","2026-07-03T16:31:19.368382",{"slug":1695,"name":1695,"fn":1696,"description":1697,"org":1698,"tags":1699,"stars":1566,"repoUrl":1567,"updatedAt":1705},"azure-data-tables-java","build table storage applications with Java","Build table storage applications with Azure Tables SDK for Java. Use when working with Azure Table Storage or Cosmos DB Table API for NoSQL key-value data, schemaless storage, or structured data at scale.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1700,1701,1702,1703,1704],{"name":17,"slug":18,"type":15},{"name":1671,"slug":1672,"type":15},{"name":1674,"slug":1675,"type":15},{"name":1238,"slug":1583,"type":15},{"name":1677,"slug":1678,"type":15},"2026-05-13T06:14:17.582229",267]