azure-identity

name	azure-identity
compatibility	["github-copilot-cli"]
description	Use when designing Azure identity and access patterns across RBAC, managed identities, Entra ID, and workload federation. USE FOR: assign Azure RBAC roles, configure managed identity for an app, create an Entra ID app registration, set up GitHub OIDC federation, design a conditional access policy. DO NOT USE FOR: local password reset flows, network segmentation design, non-Azure IAM platforms.
category	infrastructure
metadata	{"category":"infrastructure","maturity":"stable","audience":["developer"]}
allowed-tools	[]

Azure Identity & Entra ID Skill

Design and implement Azure identity and access management — RBAC hierarchies, managed identities, Entra ID app registrations, conditional access policies, and workload identity federation.

Templates in This Skill

Template	Purpose
rbac-role-assignment-template.md	RBAC role assignment matrix — principal-to-role-to-scope mappings
managed-identity-mapping-template.md	Managed identity catalogue — system-assigned and user-assigned per workload
app-registration-checklist.md	Entra ID app registration — API permissions, credentials, token configuration
workload-identity-federation-template.md	GitHub Actions OIDC and external identity provider federation
conditional-access-policy-template.md	Zero trust conditional access — users, devices, applications

Agent Pairing

Use with identity-architect agent. For IaC provisioning pair with devops-engineer; for app auth pair with backend-dev or frontend-dev; for threat modeling pair with security-analyst.