[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M699P9MTFGPHHPWDZCDCXAK7":3,"skill-same:01M699P9MTFGPHHPWDZCDCXAK7":143},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":26,"publishedAt":47,"linkOnly":48,"markdownContent":49,"markdownBody":50,"frontMatter":51,"refName":54,"commitSha":55,"skillDirectory":56,"forksCount":57,"repositoryHtmlUrl":58,"repositoryHomepageUrl":6,"ownerHtmlUrl":59,"ownerBlogUrl":60,"ownerDescription":61,"updatedAt":62,"install":63,"resources":76},"01M699P9MTFGPHHPWDZCDCXAK7","entra-app-registration",null,"Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.","microsoft\u002Fazure-skills","microsoft","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F6154722?v=4","01M698VYDXZ6JW5WH3CRV650R8","Microsoft","01M699HXPKQFT1BH5KD1PG0CB4",1636,"MIT","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002FSKILL.md",[18,23],{"categoryNo":19,"categoryName":20,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000010","后端与接口","SCENARIO","使用场景",{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000023","Skill与智能体开发",[27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,9],"entra app registration","app","registration","SET","add","guides","register","do","up","configure","secrets","api","security","audit","permissions","authentication","generate","create","entra id","auth","2026-11-10 10:12:30",false,"---\nname: entra-app-registration\ndescription: \"Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.\"\nlicense: MIT\nmetadata:\n  author: Microsoft\n  version: \"1.2.1\"\n---\n\n## Overview\n\nMicrosoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud-based identity and access management service. App registrations allow applications to authenticate users and access Azure resources securely.\n\n### Key Concepts\n\n| Concept | Description |\n|---------|-------------|\n| **App Registration** | Configuration that allows an app to use Microsoft identity platform |\n| **Application (Client) ID** | Unique identifier for your application |\n| **Tenant ID** | Unique identifier for your Azure AD tenant\u002Fdirectory |\n| **Client Secret** | Password for the application (confidential clients only) |\n| **Redirect URI** | URL where authentication responses are sent |\n| **API Permissions** | Access scopes your app requests |\n| **Service Principal** | Identity created in your tenant when you register an app |\n\n### Application Types\n\n| Type | Use Case |\n|------|----------|\n| **Web Application** | Server-side apps, APIs |\n| **Single Page App (SPA)** | JavaScript\u002FReact\u002FAngular apps |\n| **Mobile\u002FNative App** | Desktop, mobile apps |\n| **Daemon\u002FService** | Background services, APIs |\n\n## Core Workflow\n\n### Step 1: Register the Application\n\nCreate an app registration in the Azure portal or using Azure CLI.\n\n**Portal Method:**\n1. Navigate to Azure Portal → Microsoft Entra ID → App registrations\n2. Click \"New registration\"\n3. Provide name, supported account types, and redirect URI\n4. Click \"Register\"\n\n**CLI Method:** See [references\u002Fcli-commands.md](references\u002Fcli-commands.md)\n**IaC Method:** See [references\u002FBICEP-EXAMPLE.bicep](references\u002FBICEP-EXAMPLE.bicep)\n\nIt's highly recommended to use the IaC to manage Entra app registration if you already use IaC in your project, need a scalable solution for managing lots of app registrations or need fine-grained audit history of the configuration changes. \n\n### Step 2: Configure Authentication\n\nSet up authentication settings based on your application type.\n\n- **Web Apps**: Add redirect URIs, enable ID tokens if needed\n- **SPAs**: Add redirect URIs, enable implicit grant flow if necessary\n- **Mobile\u002FDesktop**: Use `http:\u002F\u002Flocalhost` or custom URI scheme\n- **Services**: No redirect URI needed for client credentials flow\n\n### Step 3: Configure API Permissions\n\nGrant your application permission to access Microsoft APIs or your own APIs.\n\n**Common Microsoft Graph Permissions:**\n- `User.Read` - Read user profile\n- `User.ReadWrite.All` - Read and write all users\n- `Directory.Read.All` - Read directory data\n- `Mail.Send` - Send mail as a user\n\n**Details:** See [references\u002Fapi-permissions.md](references\u002Fapi-permissions.md)\n\n### Step 4: Create Client Credentials (if needed)\n\nFor confidential client applications (web apps, services), create a client secret, certificate or federated identity credential.\n\n**Client Secret:**\n- Navigate to \"Certificates & secrets\"\n- Create new client secret\n- Copy the value immediately (only shown once)\n- Store securely (Key Vault recommended)\n\n**Certificate:** For production environments, use certificates instead of secrets for enhanced security. Upload certificate via \"Certificates & secrets\" section.\n\n**Federated Identity Credential:** For dynamically authenticating the confidential client to Entra platform.\n\n### Step 5: Implement OAuth Flow\n\nIntegrate the OAuth flow into your application code.\n\n**See:**\n- [references\u002Foauth-flows.md](references\u002Foauth-flows.md) - OAuth 2.0 flow details\n- [references\u002Fconsole-app-example.md](references\u002Fconsole-app-example.md) - Console app implementation\n\n## Common Patterns\n\n### Pattern 1: First-Time App Registration\n\nWalk user through their first app registration step-by-step.\n\n**Required Information:**\n- Application name\n- Application type (web, SPA, mobile, service)\n- Redirect URIs (if applicable)\n- Required permissions\n\n**Script:** See [references\u002Ffirst-app-registration.md](references\u002Ffirst-app-registration.md)\n\n### Pattern 2: Console Application with User Authentication\n\nCreate a .NET\u002FPython\u002FNode.js console app that authenticates users.\n\n**Required Information:**\n- Programming language (C#, Python, JavaScript, etc.)\n- Authentication library (MSAL recommended)\n- Required permissions\n\n**Example:** See [references\u002Fconsole-app-example.md](references\u002Fconsole-app-example.md)\n\n### Pattern 3: Service-to-Service Authentication\n\nSet up daemon\u002Fservice authentication without user interaction.\n\n**Required Information:**\n- Service\u002Fapp name\n- Target API\u002Fresource\n- Whether to use secret or certificate\n\n**Implementation:** Use Client Credentials flow (see [references\u002Foauth-flows.md#client-credentials-flow](references\u002Foauth-flows.md#client-credentials-flow))\n\n## MCP Tools and CLI\n\n### Azure CLI Commands\n\n| Command | Purpose |\n|---------|---------|\n| `az ad app create` | Create new app registration |\n| `az ad app list` | List app registrations |\n| `az ad app show` | Show app details |\n| `az ad app permission add` | Add API permission |\n| `az ad app credential reset` | Generate new client secret |\n| `az ad sp create` | Create service principal |\n\n**Complete reference:** See [references\u002Fcli-commands.md](references\u002Fcli-commands.md)\n\n### Microsoft Authentication Library (MSAL)\n\nMSAL is the recommended library for integrating Microsoft identity platform.\n\n**Supported Languages:**\n- .NET\u002FC# - `Microsoft.Identity.Client`\n- JavaScript\u002FTypeScript - `@azure\u002Fmsal-browser`, `@azure\u002Fmsal-node`\n- Python - `msal`\n\n**Examples:** See [references\u002Fconsole-app-example.md](references\u002Fconsole-app-example.md)\n\n## Security Best Practices\n\n| Practice | Recommendation |\n|----------|---------------|\n| **Never hardcode secrets** | Use environment variables, Azure Key Vault, or managed identity |\n| **Rotate secrets regularly** | Set expiration, automate rotation |\n| **Use certificates over secrets** | More secure for production |\n| **Least privilege permissions** | Request only required API permissions |\n| **Enable MFA** | Require multi-factor authentication for users |\n| **Use managed identity** | For Azure-hosted apps, avoid secrets entirely |\n| **Validate tokens** | Always validate issuer, audience, expiration |\n| **Use HTTPS only** | All redirect URIs must use HTTPS (except localhost) |\n| **Monitor sign-ins** | Use Entra ID sign-in logs for anomaly detection |\n\n## SDK Quick References\n\n- **Azure Identity**: [Python](references\u002Fsdk\u002Fazure-identity-py.md) | [.NET](references\u002Fsdk\u002Fazure-identity-dotnet.md) | [TypeScript](references\u002Fsdk\u002Fazure-identity-ts.md) | [Java](references\u002Fsdk\u002Fazure-identity-java.md) | [Rust](references\u002Fsdk\u002Fazure-identity-rust.md)\n- **Key Vault (secrets)**: [Python](references\u002Fsdk\u002Fazure-keyvault-py.md) | [TypeScript](references\u002Fsdk\u002Fazure-keyvault-secrets-ts.md)\n- **Auth Events**: [.NET](references\u002Fsdk\u002Fmicrosoft-azure-webjobs-extensions-authentication-events-dotnet.md)\n\n## References\n\n- [OAuth Flows](references\u002Foauth-flows.md) - Detailed OAuth 2.0 flow explanations\n- [CLI Commands](references\u002Fcli-commands.md) - Azure CLI reference for app registrations\n- [Console App Example](references\u002Fconsole-app-example.md) - Complete working examples\n- [First App Registration](references\u002Ffirst-app-registration.md) - Step-by-step guide for beginners\n- [API Permissions](references\u002Fapi-permissions.md) - Understanding and configuring permissions\n- [Troubleshooting](references\u002Ftroubleshooting.md) - Common issues and solutions\n\n## External Resources\n\n- [Microsoft Identity Platform Documentation](https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fidentity-platform\u002F)\n- [OAuth 2.0 and OpenID Connect protocols](https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fidentity-platform\u002Fv2-protocols)\n- [MSAL Documentation](https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fmsal\u002F)\n- [Microsoft Graph API](https:\u002F\u002Flearn.microsoft.com\u002Fgraph\u002F)\n","## Overview\n\nMicrosoft Entra ID (formerly Azure Active Directory) is Microsoft's cloud-based identity and access management service. App registrations allow applications to authenticate users and access Azure resources securely.\n\n### Key Concepts\n\n| Concept | Description |\n|---------|-------------|\n| **App Registration** | Configuration that allows an app to use Microsoft identity platform |\n| **Application (Client) ID** | Unique identifier for your application |\n| **Tenant ID** | Unique identifier for your Azure AD tenant\u002Fdirectory |\n| **Client Secret** | Password for the application (confidential clients only) |\n| **Redirect URI** | URL where authentication responses are sent |\n| **API Permissions** | Access scopes your app requests |\n| **Service Principal** | Identity created in your tenant when you register an app |\n\n### Application Types\n\n| Type | Use Case |\n|------|----------|\n| **Web Application** | Server-side apps, APIs |\n| **Single Page App (SPA)** | JavaScript\u002FReact\u002FAngular apps |\n| **Mobile\u002FNative App** | Desktop, mobile apps |\n| **Daemon\u002FService** | Background services, APIs |\n\n## Core Workflow\n\n### Step 1: Register the Application\n\nCreate an app registration in the Azure portal or using Azure CLI.\n\n**Portal Method:**\n1. Navigate to Azure Portal → Microsoft Entra ID → App registrations\n2. Click \"New registration\"\n3. Provide name, supported account types, and redirect URI\n4. Click \"Register\"\n\n**CLI Method:** See [references\u002Fcli-commands.md](references\u002Fcli-commands.md)\n**IaC Method:** See [references\u002FBICEP-EXAMPLE.bicep](references\u002FBICEP-EXAMPLE.bicep)\n\nIt's highly recommended to use the IaC to manage Entra app registration if you already use IaC in your project, need a scalable solution for managing lots of app registrations or need fine-grained audit history of the configuration changes. \n\n### Step 2: Configure Authentication\n\nSet up authentication settings based on your application type.\n\n- **Web Apps**: Add redirect URIs, enable ID tokens if needed\n- **SPAs**: Add redirect URIs, enable implicit grant flow if necessary\n- **Mobile\u002FDesktop**: Use `http:\u002F\u002Flocalhost` or custom URI scheme\n- **Services**: No redirect URI needed for client credentials flow\n\n### Step 3: Configure API Permissions\n\nGrant your application permission to access Microsoft APIs or your own APIs.\n\n**Common Microsoft Graph Permissions:**\n- `User.Read` - Read user profile\n- `User.ReadWrite.All` - Read and write all users\n- `Directory.Read.All` - Read directory data\n- `Mail.Send` - Send mail as a user\n\n**Details:** See [references\u002Fapi-permissions.md](references\u002Fapi-permissions.md)\n\n### Step 4: Create Client Credentials (if needed)\n\nFor confidential client applications (web apps, services), create a client secret, certificate or federated identity credential.\n\n**Client Secret:**\n- Navigate to \"Certificates & secrets\"\n- Create new client secret\n- Copy the value immediately (only shown once)\n- Store securely (Key Vault recommended)\n\n**Certificate:** For production environments, use certificates instead of secrets for enhanced security. Upload certificate via \"Certificates & secrets\" section.\n\n**Federated Identity Credential:** For dynamically authenticating the confidential client to Entra platform.\n\n### Step 5: Implement OAuth Flow\n\nIntegrate the OAuth flow into your application code.\n\n**See:**\n- [references\u002Foauth-flows.md](references\u002Foauth-flows.md) - OAuth 2.0 flow details\n- [references\u002Fconsole-app-example.md](references\u002Fconsole-app-example.md) - Console app implementation\n\n## Common Patterns\n\n### Pattern 1: First-Time App Registration\n\nWalk user through their first app registration step-by-step.\n\n**Required Information:**\n- Application name\n- Application type (web, SPA, mobile, service)\n- Redirect URIs (if applicable)\n- Required permissions\n\n**Script:** See [references\u002Ffirst-app-registration.md](references\u002Ffirst-app-registration.md)\n\n### Pattern 2: Console Application with User Authentication\n\nCreate a .NET\u002FPython\u002FNode.js console app that authenticates users.\n\n**Required Information:**\n- Programming language (C#, Python, JavaScript, etc.)\n- Authentication library (MSAL recommended)\n- Required permissions\n\n**Example:** See [references\u002Fconsole-app-example.md](references\u002Fconsole-app-example.md)\n\n### Pattern 3: Service-to-Service Authentication\n\nSet up daemon\u002Fservice authentication without user interaction.\n\n**Required Information:**\n- Service\u002Fapp name\n- Target API\u002Fresource\n- Whether to use secret or certificate\n\n**Implementation:** Use Client Credentials flow (see [references\u002Foauth-flows.md#client-credentials-flow](references\u002Foauth-flows.md#client-credentials-flow))\n\n## MCP Tools and CLI\n\n### Azure CLI Commands\n\n| Command | Purpose |\n|---------|---------|\n| `az ad app create` | Create new app registration |\n| `az ad app list` | List app registrations |\n| `az ad app show` | Show app details |\n| `az ad app permission add` | Add API permission |\n| `az ad app credential reset` | Generate new client secret |\n| `az ad sp create` | Create service principal |\n\n**Complete reference:** See [references\u002Fcli-commands.md](references\u002Fcli-commands.md)\n\n### Microsoft Authentication Library (MSAL)\n\nMSAL is the recommended library for integrating Microsoft identity platform.\n\n**Supported Languages:**\n- .NET\u002FC# - `Microsoft.Identity.Client`\n- JavaScript\u002FTypeScript - `@azure\u002Fmsal-browser`, `@azure\u002Fmsal-node`\n- Python - `msal`\n\n**Examples:** See [references\u002Fconsole-app-example.md](references\u002Fconsole-app-example.md)\n\n## Security Best Practices\n\n| Practice | Recommendation |\n|----------|---------------|\n| **Never hardcode secrets** | Use environment variables, Azure Key Vault, or managed identity |\n| **Rotate secrets regularly** | Set expiration, automate rotation |\n| **Use certificates over secrets** | More secure for production |\n| **Least privilege permissions** | Request only required API permissions |\n| **Enable MFA** | Require multi-factor authentication for users |\n| **Use managed identity** | For Azure-hosted apps, avoid secrets entirely |\n| **Validate tokens** | Always validate issuer, audience, expiration |\n| **Use HTTPS only** | All redirect URIs must use HTTPS (except localhost) |\n| **Monitor sign-ins** | Use Entra ID sign-in logs for anomaly detection |\n\n## SDK Quick References\n\n- **Azure Identity**: [Python](references\u002Fsdk\u002Fazure-identity-py.md) | [.NET](references\u002Fsdk\u002Fazure-identity-dotnet.md) | [TypeScript](references\u002Fsdk\u002Fazure-identity-ts.md) | [Java](references\u002Fsdk\u002Fazure-identity-java.md) | [Rust](references\u002Fsdk\u002Fazure-identity-rust.md)\n- **Key Vault (secrets)**: [Python](references\u002Fsdk\u002Fazure-keyvault-py.md) | [TypeScript](references\u002Fsdk\u002Fazure-keyvault-secrets-ts.md)\n- **Auth Events**: [.NET](references\u002Fsdk\u002Fmicrosoft-azure-webjobs-extensions-authentication-events-dotnet.md)\n\n## References\n\n- [OAuth Flows](references\u002Foauth-flows.md) - Detailed OAuth 2.0 flow explanations\n- [CLI Commands](references\u002Fcli-commands.md) - Azure CLI reference for app registrations\n- [Console App Example](references\u002Fconsole-app-example.md) - Complete working examples\n- [First App Registration](references\u002Ffirst-app-registration.md) - Step-by-step guide for beginners\n- [API Permissions](references\u002Fapi-permissions.md) - Understanding and configuring permissions\n- [Troubleshooting](references\u002Ftroubleshooting.md) - Common issues and solutions\n\n## External Resources\n\n- [Microsoft Identity Platform Documentation](https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fidentity-platform\u002F)\n- [OAuth 2.0 and OpenID Connect protocols](https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fidentity-platform\u002Fv2-protocols)\n- [MSAL Documentation](https:\u002F\u002Flearn.microsoft.com\u002Fentra\u002Fmsal\u002F)\n- [Microsoft Graph API](https:\u002F\u002Flearn.microsoft.com\u002Fgraph\u002F)\n",{"name":5,"license":15,"metadata":52,"description":7},{"author":12,"version":53},"1.2.1","main","fbda857c484a85c7ce644f56809b7f204471fb69",".github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration",266,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills","https:\u002F\u002Fgithub.com\u002Fmicrosoft","https:\u002F\u002Fopensource.microsoft.com","Open source projects and samples from Microsoft","2026-11-12 02:02:55",{"source":8,"skillName":5,"commands":64,"prompt":74,"zipAvailable":75},[65,68,71],{"tool":66,"command":67},"npx","npx skills add microsoft\u002Fazure-skills --skill entra-app-registration",{"tool":69,"command":70},"bunx","bunx skills add microsoft\u002Fazure-skills --skill entra-app-registration",{"tool":72,"command":73},"pnpm","pnpm dlx skills add microsoft\u002Fazure-skills --skill entra-app-registration","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002FSKILL.md",true,[77,83,87,91,95,99,103,107,111,115,119,123,127,131,135,139],{"path":78,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":81,"sourceHtmlUrl":82},"references\u002Fapi-permissions.md","REFERENCE","参考文档",10198,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fapi-permissions.md",{"path":84,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":85,"sourceHtmlUrl":86},"references\u002Fauth-best-practices.md",6207,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fauth-best-practices.md",{"path":88,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":89,"sourceHtmlUrl":90},"references\u002FBICEP-EXAMPLE.bicep",5328,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002FBICEP-EXAMPLE.bicep",{"path":92,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":93,"sourceHtmlUrl":94},"references\u002Fcli-commands.md",8852,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fcli-commands.md",{"path":96,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":97,"sourceHtmlUrl":98},"references\u002Fconsole-app-example.md",11005,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fconsole-app-example.md",{"path":100,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":101,"sourceHtmlUrl":102},"references\u002Ffirst-app-registration.md",7415,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Ffirst-app-registration.md",{"path":104,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":105,"sourceHtmlUrl":106},"references\u002Foauth-flows.md",9540,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Foauth-flows.md",{"path":108,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":109,"sourceHtmlUrl":110},"references\u002Fsdk\u002Fazure-identity-dotnet.md",940,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fsdk\u002Fazure-identity-dotnet.md",{"path":112,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":113,"sourceHtmlUrl":114},"references\u002Fsdk\u002Fazure-identity-java.md",1248,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fsdk\u002Fazure-identity-java.md",{"path":116,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":117,"sourceHtmlUrl":118},"references\u002Fsdk\u002Fazure-identity-py.md",1148,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fsdk\u002Fazure-identity-py.md",{"path":120,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":121,"sourceHtmlUrl":122},"references\u002Fsdk\u002Fazure-identity-rust.md",805,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fsdk\u002Fazure-identity-rust.md",{"path":124,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":125,"sourceHtmlUrl":126},"references\u002Fsdk\u002Fazure-identity-ts.md",1144,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fsdk\u002Fazure-identity-ts.md",{"path":128,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":129,"sourceHtmlUrl":130},"references\u002Fsdk\u002Fazure-keyvault-py.md",1135,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fsdk\u002Fazure-keyvault-py.md",{"path":132,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":133,"sourceHtmlUrl":134},"references\u002Fsdk\u002Fazure-keyvault-secrets-ts.md",1043,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fsdk\u002Fazure-keyvault-secrets-ts.md",{"path":136,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":137,"sourceHtmlUrl":138},"references\u002Fsdk\u002Fmicrosoft-azure-webjobs-extensions-authentication-events-dotnet.md",1522,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Fsdk\u002Fmicrosoft-azure-webjobs-extensions-authentication-events-dotnet.md",{"path":140,"resourceType":79,"resourceTypeDesc":80,"sizeBytes":141,"sourceHtmlUrl":142},"references\u002Ftroubleshooting.md",7594,"https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002F.github\u002Fplugins\u002Fazure-skills\u002Fskills\u002Fentra-app-registration\u002Freferences\u002Ftroubleshooting.md",[144,172,197,217,234,249],{"skillNo":145,"name":146,"nameZh":6,"description":147,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":148,"categories":149,"keywords":153,"publishedAt":47},"01M699VFT1T15GFDGC4K4ZHY4N","python-appservice-deploy","Deploy Python (Flask\u002FDjango\u002FFastAPI) code to Azure App Service Linux. WHEN: \"Flask App Service\", \"Django App Service\", \"FastAPI App Service\", \"deploy Python to App Service\". DO NOT USE FOR: Container Apps, Functions, non-Python, Terraform\u002FBicep\u002FIaC, full infra — use azure-prepare.","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002Fskills\u002Fpython-appservice-deploy\u002FSKILL.md",[150],{"categoryNo":151,"categoryName":152,"taxonomyType":21,"taxonomyTypeDesc":22},"01JBSEEDCAT000000000000011","运维与部署",[154,155,156,157,158,28,34,159,160,161,162,163,164,165,166,167,168,169,170,171],"python appservice deploy","deploy","python","linux","infra","django","for","azure app service","azure","container","iac","fastapi","use","apps","when","code","functions","fastapi app",{"skillNo":173,"name":174,"nameZh":6,"description":175,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":176,"categories":177,"keywords":180,"publishedAt":47},"01M699VDV3PT5P0YDXRT4GM2TJ","preset","Intelligently deploys Azure OpenAI models to optimal regions by analyzing capacity across all available regions. Automatically checks current region first and shows alternatives if needed. USE FOR: quick deployment, optimal region, best region, automatic region selection, fast setup, multi-region capacity check, high availability deployment, deploy to best location. DO NOT USE FOR: custom SKU selection (use customize), specific version selection (use customize), custom capacity configuration (use customize), PTU deployments (use customize).","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002Fskills\u002Fmicrosoft-foundry\u002Fmodels\u002Fdeploy-model\u002Fpreset\u002FSKILL.md",[178,179],{"categoryNo":151,"categoryName":152,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[174,155,181,9,182,183,34,184,185,160,186,187,188,162,189,190,191,166,192,193,194,195,196],"setup","capacity","customize","quick","availability","deployment","alternatives","selection","custom","deployments","high availability","version","across","check","multi","first",{"skillNo":198,"name":183,"nameZh":6,"description":199,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":200,"categories":201,"keywords":203,"publishedAt":47},"01M699VBT6YFAKBWCK890XDB6N","Interactive guided deployment flow for Azure OpenAI models with full customization control. Step-by-step selection of model version, SKU (GlobalStandard\u002FStandard\u002FProvisionedManaged), capacity, RAI policy (content filter), and advanced options (dynamic quota, priority processing, spillover). USE FOR: custom deployment, customize model deployment, choose version, select SKU, set capacity, configure content filter, RAI policy, deployment options, detailed deployment, advanced deployment, PTU deployment, provisioned throughput. DO NOT USE FOR: quick deployment to optimal region (use preset).","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002Fskills\u002Fmicrosoft-foundry\u002Fmodels\u002Fdeploy-model\u002Fcustomize\u002FSKILL.md",[202],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[183,174,9,182,204,30,184,205,206,207,208,209,188,36,210,211,212,213,214,215,216,34,160,186],"policy","processing","advanced","model","select","choose","filter","azure openai","options","flow","openai","throughput","full",{"skillNo":218,"name":182,"nameZh":6,"description":219,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":220,"categories":221,"keywords":222,"publishedAt":47},"01M699V9FXHBSWG3Y48057VAYZ","Discovers available Azure OpenAI model capacity across regions and projects. Analyzes quota limits, compares availability, and recommends optimal deployment locations based on capacity requirements. USE FOR: find capacity, check quota, where can I deploy, capacity discovery, best region for capacity, multi-project capacity search, quota analysis, model availability, region comparison, check TPM availability. DO NOT USE FOR: actual deployment (hand off to preset or customize after discovery), quota increase requests (direct user to Azure Portal), listing existing deployments.","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002Fskills\u002Fmicrosoft-foundry\u002Fmodels\u002Fdeploy-model\u002Fcapacity\u002FSKILL.md",[],[182,174,155,9,183,223,207,224,225,226,227,228,193,211,229,230,214,231,232,34,185,160,233,186],"projects","project","search","analysis","listing","hand","limits","azure portal","direct","TPM","discovery",{"skillNo":235,"name":236,"nameZh":6,"description":237,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":238,"categories":239,"keywords":242,"publishedAt":47},"01M699V7GW2RF4AB3RE3Z8Y048","deploy-model","Unified Azure OpenAI model deployment skill with intelligent intent-based routing. Handles quick preset deployments, fully customized deployments (version\u002FSKU\u002Fcapacity\u002FRAI policy), and capacity discovery across regions and projects. USE FOR: deploy model, deploy gpt, create deployment, model deployment, deploy openai model, set up model, provision model, find capacity, check model availability, where can I deploy, best region for model, capacity analysis. DO NOT USE FOR: listing existing deployments (use foundry_models_deployments_list MCP tool), deleting deployments, agent creation (use agent\u002Fcreate), project creation (use project\u002Fcreate).","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002Fskills\u002Fmicrosoft-foundry\u002Fmodels\u002Fdeploy-model\u002FSKILL.md",[240,241],{"categoryNo":151,"categoryName":152,"taxonomyType":21,"taxonomyTypeDesc":22},{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[155,243,207,174,244,245,9,182,204,30,223,184,246,224,35,226,227,193,44,211,247,248,214,34,185],"deploy model","MCP","foundry","creation","intent","list",{"skillNo":250,"name":251,"nameZh":6,"description":252,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":253,"categories":254,"keywords":256,"publishedAt":47},"01M699V3NA4YQKCHJTVWHBQH10","finetuning","Fine-tune models on Microsoft Foundry using SFT (supervised), DPO (preference), or RFT (reinforcement with graders). Covers dataset preparation, training job submission, deployment, and evaluation. USE FOR: fine-tune, SFT, DPO, RFT, training data, grader, distillation, fine-tuned model, training job, large file upload, calibrate grader, deploy fine-tuned model, evaluate fine-tuned model. DO NOT USE FOR: general model deployment without fine-tuning (use deploy-model), agent creation (use agents), prompt optimization without training (use prompt-optimizer).","https:\u002F\u002Fgithub.com\u002Fmicrosoft\u002Fazure-skills\u002Fblob\u002Fmain\u002Fskills\u002Fmicrosoft-foundry\u002Ffinetuning\u002FSKILL.md",[255],{"categoryNo":24,"categoryName":25,"taxonomyType":21,"taxonomyTypeDesc":22},[251,257,155,245,258,9,259,246,207,260,261,262,263,264,265,266,267,268,34,160,269,270,186,271],"placeholder","microsoft foundry","Prompt Optimization","training","dataset","optimizer","Evaluation","tuning","grader","data","supervised","distillation","Optimization","calibrate","submission"]