Microsoft Entra Agent ID
GeneralAgent Id
In brief
The documentation now identifies the agent identity, rather than the application or autonomous agent, as the subject in application-only access.
What Entra admins need to know
Administrators should use the updated “agent identity” terminology when reviewing this guidance; no action is required.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
- Subject: The identity that receives the token.
- In delegated access, the token represents the user while also identifying the calling application or agent.
- In application-only access, the
application or autonomousagent identity is the subject. - In agent-user access, the agent's user account is the subject.
- Audience: The target resource that the token is for, which must be registered in Entra ID. If a subject accesses multiple resources, it typically needs a separate token for each resource.
@@ -46,7 +46,7 @@ Each access token has one subject and one audience: - **Subject**: The identity that receives the token. - In delegated access, the token represents the user while also identifying the calling application or agent.- - In application-only access, the application or autonomous agent is the subject. + - In application-only access, the agent identity is the subject. - In agent-user access, the agent's user account is the subject. - **Audience**: The target resource that the token is for, which must be registered in Entra ID. If a subject accesses multiple resources, it typically needs a separate token for each resource.