/

/entra-app-registration

351

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.

17 files
81.4 KB
MIT
Updated 2 months ago
GitHub
1 warning

Ask your Agent

Use this Skill: https://skilld.dev/gh/microsoft/skills/entra-app-registration

This session only. Nothing lands on disk.

referencessdkazure-keyvault-secrets-ts.md

1 KB raw

≈261 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Key Vault Secrets — TypeScript SDK Quick Reference

Condensed from azure-keyvault-secrets-ts. Full patterns (key rotation, cryptographic operations, backup/restore, wrap/unwrap) in the azure-keyvault-secrets-ts plugin skill if installed.

Install

npm install @azure/keyvault-secrets @azure/identity

Quick Start

import { DefaultAzureCredential } from "@azure/identity";
import { SecretClient } from "@azure/keyvault-secrets";
const client = new SecretClient("https://<vault>.vault.azure.net", new DefaultAzureCredential());

Best Practices

Use DefaultAzureCredential for local development only. In production, use ManagedIdentityCredential — see auth-best-practices.md
Enable soft-delete — required for production vaults
Set expiration dates on both keys and secrets
Use key rotation policies — automate key rotation
Limit key operations — only grant needed operations (encrypt, sign, etc.)
Browser not supported — these SDKs are Node.js only

Source: SKILL.md on GitHub

Third-party checks

1 warning15d4 checks · Risk SAFE

Gen Agent Trust Hub15d
This skill provides comprehensive and secure guidance for Microsoft Entra ID app registration and integration. It emphasizes industry best practices, such as utilizing managed identities and secure secret storage, while referencing official Microsoft libraries and standard tooling.
Socket15d
No alerts
Snyk15d
Risk: LOW · No issues
Runlayer7mo
16/16 files flagged

Provenance

Signed by skilld at b3c238e. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub yesterday.

Activeupdated 2 months ago

Capability

metadata: { "author": "Microsoft", "version": "1.2.1" }

/entra-app-registration