Jan's resource catalog to learn all about agents (from an Entra ID perspective)

I’ve been digging into agents lately, especially the identity and security aspects. As this whole concept is quite new to all of us, it’s always hard to know where to start. Who got this thing figured out already? Who to follow? Who to ask questions?

Before I dare to write anything myself, I want to have a good understanding of agents in general, where they are born, how they operate, authenticate, and authorize. I also want to know what hackers can do, as I feel this will be a significant attack surface in the coming years.

This post is a (growing) collection of all resources that I’m using to learn this new thing. As I already got them in my notes, why not share them with the rest of the world? So far, I have not seen any training (wait, there is) or Microsoft exam covering these topics, so we’ll have to start from the ground up.

Microsoft resources#

What is Microsoft Entra Agent ID? - Microsoft Entra Agent ID | Microsoft Learn
Explore Microsoft 365 Copilot and Agent Administration - Training | Microsoft Learn
Conditional Access for Agent Identities in Microsoft Entra

Microsoft Events#

Secure access for AI agents, the new frontier of identity | Microsoft Community Hub

Community resources#

Agent Identity demystified by Derk van der Woude
Agent Identity Security controls … by Derk van der Woude
A Deep-Dive into Entra Agent ID Authentication | by Derk van der Woude | Apr, 2026 | Medium by Derk van der Woude
Your Copilot Studio agent is acting as someone, do you know who? | by Derk van der Woude | Mar, 2026 | Medium by Derk van der Woude
From Blueprint to Token: How Entra Agent Identity Inheritance Really Works | by Derk van der Woude | Mar, 2026 | Medium by Derk van der Woude
Copilot Studio Agent Security misconfigurations — part II | by Derk van der Woude | Mar, 2026 | Medium by Derk van der Woude
Copilot Studio Agent Security misconfigurations | by Derk van der Woude | Mar, 2026 | Medium by Derk van der Woude
AI Agent Security Posture | No Authentication⚠️ | by Derk van der Woude | Mar, 2026 | Medium by Derk van der Woude
Security Dashboard for AI Security requirements explained (complex) | by Derk van der Woude | Feb, 2026 | Medium by Derk van der Woude
Entra Agent ID Portal explained. The Entra Agent Registry is the source… | by Derk van der Woude | Medium by Derk van der Woude
Copilot Studio Agent Security lessons learned from the field | by Derk van der Woude | Medium by Derk van der Woude
Agent Identity Security controls … | by Derk van der Woude | Medium by Derk van der Woude
Entra ID — Agent Identity Security products explained by Derk van der Woude
Getting a first grip on Copilot Studio agents as an administrator by Robbe Van den Daele
Agents in Entra: Security Risks and Governance Best Practices by ENow Software
Microsoft Entra Agent ID: A Practical Guide to Blueprints and Agent Identities – Microsoft Security Blog by thalpius

\

Video’s#

Diving Into the New Microsoft Entra Agent ID by Kyle Marsh
Microsoft Agent Identity Platform Fundamentals by Kyle Marsh
Entra Agent Registry: The Corporate Yellow Pages for AI Agents by Merill Fernando and Padma Parthasarathy
Technical AI Agent foundations and Microsoft Entra Agent ID by Heike Ritter and Anton Staykov
What is Agent ID (or Microsoft Entra Agent ID?) by Girish Uppal
How Agent ID Secures your AI Agents in Microsoft Entra by Rudy Mens

Podcast#

The Azure Security Podcast Episode 123: Agentic Identity by Michael Howard, Sarah Young, Gladys Rodriguez, and Mark Simos

Tools#

Agent-Identity/Get-CopilotStudioAgentName.ps1 at main · Blue161616/Agent-Identity