Microsoft Foundry

Connect Agent Identity Security to Microsoft Foundry (Azure AI Foundry) to discover AI agents, monitor deployments, and track agent executions.

Agent Identity Security authenticates using an Azure AD app registration that has the Azure AI Developer role assigned to your Azure AI Foundry hub or project resource.

Prerequisites

  • An active Azure subscription with an Azure AI Foundry hub or project resource provisioned.
  • Permission to register applications in Azure Active Directory.
  • Permission to assign roles on Azure AI Foundry resources.

Application Registration

Register an Azure Active Directory application for Agent Identity Security to use when it authenticates with Azure AI Foundry:

  1. In Azure Portal, go to Azure Active Directory > App Registrations and select New registration.
  2. Enter a descriptive name such as Agent Identity Security-Foundry. Set Supported account types to Accounts in this organizational directory only. Select Register.
  3. On the Overview page, copy the Application (client) ID and the Directory (tenant) ID.
  4. Go to Certificates & secrets > Client secrets > New client secret. Enter a description and expiry period, then select Add.
  5. Copy the Value immediately. It is shown only once.

Role Assignment (IAM)

Grant the registered application access to your Azure AI Foundry resource:

  1. In Azure Portal, go to your Azure AI Foundry hub or project resource.
  2. Go to Access control (IAM) > Add > Add role assignment.
  3. Select the Azure AI Developer role. This role provides read access to model deployments and agent resources.
  4. Under Members, select User, group, or service principal and search for the application name you registered.
  5. Select Review + assign.
Note: If Agent Identity Security needs to discover agents across multiple Foundry resources in a subscription or resource group, repeat the role assignment for each resource.

Integrate Microsoft Foundry

  1. On the Integrations page, select + Add Integration.
  2. In the Integration Catalog, select Microsoft Foundry.
    The Microsoft Foundry configuration page opens.
  3. Under Instance Details, enter the following information:
    Field Description
    *Instance Name A unique name for this integration. Example: Production Microsoft Foundry.
    Description An optional description to identify the purpose or environment of this integration.
    *: Mandatory field
  4. Under Credentials, enter the following information:
    Field Description
    *Client ID The Application (client) ID of the Azure AD app registration with access to Azure AI Foundry.
    *Client Secret The client secret you created in the Azure AD app registration.
    *Tenant ID The Directory (tenant) ID of your Azure AD tenant.
    *: Mandatory field
  5. Select Test Configuration.
    Agent Identity Security validates the credentials. A checkmark indicates success.
  6. Select Create Instance.
    Agent Identity Security creates the integration, runs an initial sync, and returns you to the Integrations list.
The Microsoft Foundry integration is active. Go to Registry > Agents to view discovered agents.