mcp-entra-design

KO | EN

gitlite — search

#typescript #llm #golang #go #android #machine-learning #linux #macos #java #kubernetes #awesome-list #pytorch #security #openai

mcp-entra-design

(★ 21)

Design choices for MCP authentication with Microsoft Entra

mcp-entra-design 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Building MCPs with Entra: Design Choices for Enterprise Agents

A 60-minute technical session on building enterprise-grade MCP (Model Context Protocol) servers with Microsoft Entra ID -- covering identity, consent, authorization, auditability, and the new Agent ID principal type.

**Presented by Merill Fernando**

## Session Recording

[![Watch the session](https://img.youtube.com/vi/ZDlP1sFKMJo/maxresdefault.jpg)](https://www.youtube.com/watch?v=ZDlP1sFKMJo)

## Slides

[View the slides (PDF)](slides/slides.pdf) | [View the slides (HTML)](slides/slides.html) | [Slide source (Marp)](slides/slides.md)

## What You'll Learn

1. **How MCP auth works** -- PRM, ASM, CIMD (SEP-991), DCR, Resource Indicators, and how the spec evolved
2. **Where Entra fits (and doesn't)** -- what's supported, what's not (CIMD, DCR), and why
3. **Auth model first** -- stdio vs remote auth options, decision trees, choose before you build
4. **Reference architecture** -- Microsoft Graph MCP Server as the exemplar, then apply it to your API
5. **Entra Agent ID** -- the new `ServiceIdentity` principal for AI agents
6. **Which Azure platform** -- Functions vs App Service vs APIM vs Container Apps
7. **How to audit and scale** -- Graph Activity Logs, Sentinel, multi-tenant, caching
8. **What to watch out for** -- 36 documented pitfalls from real deployments

## Repo Structure

```
mcpentra/
├── slides/          # Marp slide deck (md, pdf, pptx, html)
├── docs/            # 17-document knowledge base with deep-dive content
└── demo/            # Contoso Directory MCP Server (TypeScript demo project)
```

## Knowledge Base

The `docs/` folder contains the full knowledge base behind the presentation:

| # | Topic |
|---|-------|
| 0 | [Introduction: MCP and Enterprise Identity](docs/00-introduction.md) |
| 1 | [stdio vs Remote MCP Servers](docs/01-stdio-vs-remote.md) |
| 2 | [MCP Auth Spec Deep Dive](docs/02-mcp-auth-spec.md) |
| 3 | [Client Registration: CIMD, DCR, and Entra](docs/03-entra-no-dcr.md) |
| 4 | [Entra Agent ID](docs/04-entra-agent-id.md) |
| 5 | [Pattern: Microsoft Graph MCP Server](docs/05-pattern-graph-mcp.md) |
| 6 | [Pattern: EasyAuth + PRM](docs/06-pattern-easyauth-prm.md) |
| 7 | [Pattern: APIM Gateway](docs/07-pattern-apim-gateway.md) |
| 8 | [Azure Hosting Platforms](docs/08-hosting-platforms.md) |
| 9 | [Agent Platforms](docs/09-agent-platforms.md) |
| 10 | [Consent Patterns](docs/10-consent-patterns.md) |
| 11 | [Auditability](docs/11-auditability.md) |
| 12 | [Scalability](docs/12-scalability.md) |
| 13 | [Interoperability](docs/13-interoperability.md) |
| 14 | [Pitfalls (36 documented)](docs/14-pitfalls.md) |
| 15 | [Auth Flow Walkthrough](docs/15-auth-flow-walkthrough.md) |
| 16 | [Demo Plan](docs/16-demo-plan.md) |

## Key Standards

| Standard | Name | MCP Role |
|----------|------|----------|
| RFC 9728 | OAuth 2.0 Protected Resource Metadata | **MUST** -- MCP server discovery |
| RFC 8414 | OAuth 2.0 Authorization Server Metadata | **MUST** -- auth server discovery |
| RFC 8707 | Resource Indicators for OAuth 2.0 | **MUST** -- audience binding |
| SEP-991 | Client ID Metadata Documents (CIMD) | **SHOULD** -- URL-based client registration |
| RFC 7591 | Dynamic Client Registration (DCR) | **MAY** -- Entra doesn't support |

mcp-entra-design

mcp-entra-design 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

mcp-entra-design

mcp-entra-design 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README