Entra Agent Id

It walks you through the three-object model (Blueprint, BlueprintPrincipal, Agent Identity) and the two-step fmi_path token exchange that gives each agent instance its own service principal and audit trail. The documentation is thorough on the gotchas: you must explicitly create the BlueprintPrincipal or you'll hit a 400 error, and DefaultAzureCredential won't work because Azure CLI tokens get hard-rejected. Includes both PowerShell and Python examples for provisioning via Microsoft Graph, plus guidance on the AgentID sidecar for polyglot runtimes. This is newer Microsoft infrastructure, so expect some API evolution.