Requirements
Connecting Microsoft Entra Agent ID takes an active account plus OAuth client credentials, granted by signing in with your account — no other setup is required.[3]
Get your Microsoft Entra Agent ID credentials
Credential type option 1
Microsoft Agent - Secondary
You’ll be redirected to sign in and approve access — your password is never shared with WEXTL.
- Microsoft - TenantselectRequired
Go to
[1]https://entra.microsoft.comand copy your tennat ID or select any of the following` - Microsoft - Client IDtextRequired
Go to the Microsoft Entra admin center → Entra ID → App registrations and select New registration. → enter a description and expiration → Add, then immediately copy your Client ID
[1] - Microsoft - Client SecretpasswordRequired
Copy you client Secret from the previously created app
[1]
Integration requests 20 permissions:
AgentIdentity.Read.AllAgentIdentity.ReadWrite.AllAgentIdentity.EnableDisable.AllAgentIdentity.DeleteRestore.AllAgentIdentityBlueprint.Read.AllAgentIdentityBlueprint.ReadWrite.AllAgentIdentityBlueprint.CreateAgentIdUser.ReadWrite.AllAgentCard.Read.AllAgentCard.ReadWrite.AllAgentCardManifest.Read.AllAgentCardManifest.ReadWrite.AllAgentCollection.Read.AllAgentCollection.ReadWrite.AllAgentInstance.Read.AllAgentInstance.ReadWrite.AllAgentRegistration.Read.AllAgentRegistration.ReadWrite.Alloffline_accessUser.Read
Credential type option 2
Microsoft Agent - Primary
You’ll be redirected to sign in and approve access — your password is never shared with WEXTL.
- Microsoft - TenanttextRequired
Directory (tenant) ID or verified domain, e.g. contoso.onmicrosoft.com. common/organizations/consumers are not valid for app-only.
[1] - Microsoft - Client IDtextRequired
Register your application in the Microsoft Entra admin center, then copy the Application (client) ID from the app's Overview page
[1] - Microsoft - Client SecretpasswordRequired
In your app registration, go to Certificates & secrets → Client secrets, create a new client secret, and copy its value immediately after it's generated.
[1]
Integration requests 18 permissions:
AgentIdentity.Read.AllAgentIdentity.ReadWrite.AllAgentIdentity.EnableDisable.AllAgentIdentity.DeleteRestore.AllAgentIdentityBlueprint.Read.AllAgentIdentityBlueprint.ReadWrite.AllAgentIdentityBlueprint.CreateAgentIdUser.ReadWrite.AllAgentCard.Read.AllAgentCard.ReadWrite.AllAgentCardManifest.Read.AllAgentCardManifest.ReadWrite.AllAgentCollection.Read.AllAgentCollection.ReadWrite.AllAgentInstance.Read.AllAgentInstance.ReadWrite.AllAgentRegistration.Read.AllAgentRegistration.ReadWrite.All
Connect Microsoft Entra Agent ID in WEXTL
- Log in to your WEXTL account, add the Microsoft Entra Agent ID node module to your workflow, and click Create new credential.
- Optional: In the Credential name field, enter a name for the credential.
- Enter the authentication credentials you copied from your Microsoft Entra Agent ID account, or follow the on-screen instructions to create the credential.
- If prompted, authenticate your account and confirm access.
- If you want to make changes to your credential in the future, follow the steps in Manage credentials →
Notes
Credentials are org-scoped; share them with teammates from the Credentials picker on any of its nodes.For detailed information on connecting an application, see Connect an application →
Microsoft Entra Agent ID node modules
The list below is a reference of every Microsoft Entra Agent ID node module the integration supports. You will be able to pick any of them on the workflow canvas while building automations.
Expand any Microsoft Entra Agent ID node module below to see exactly what it takes in, what it returns, and what connection it needs.
Watch Agent BlueprintsTrigger
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| App ID | text |
| Identifier uris | array |
| Created by app ID | text |
| Created date time | date |
| Description | text |
| Disabled by microsoft status | text |
| Display name | text |
| Group membership claims | text |
| Publisher domain | text |
| Sign in audience | text |
| Tags | array |
| Token encryption key ID | text |
| Unique name | text |
| Service management reference | text |
| Optional claims | text |
| API | object |
| Requested access token version | number |
| Accept mapped claims | text |
| Known client applications | array |
| Oauth 2permission scopes | array |
| Pre authorized applications | array |
| Token encryption setting | object |
| App roles | array |
| Info | object |
| Terms of service URL | url |
| Support URL | url |
| Privacy statement URL | url |
| Marketing URL | url |
| Logo URL | url |
5other output fields
Watch Agent Identity Blueprints PrincipalTrigger
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| App ID | text |
| Created date time | date |
| Created by app ID | text |
| Account enabled | boolean |
| App display name | text |
| App owner organization ID | text |
| App role assignment required | boolean |
| App roles | array |
| Disabled by microsoft status | text |
| Info | object |
| Terms of service URL | url |
| Support URL | url |
| Privacy statement URL | url |
| Marketing URL | url |
| Logo URL | url |
| Oauth 2permission scopes | array |
| Service principal type | text |
| Tags | array |
| Verified publisher | text |
Watch Agent UserTrigger
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| App ID | text |
| Created date time | date |
| Created by app ID | text |
| Account enabled | boolean |
| App display name | text |
| App owner organization ID | text |
| App role assignment required | boolean |
| App roles | array |
| Disabled by microsoft status | text |
| Info | object |
| Terms of service URL | url |
| Support URL | url |
| Privacy statement URL | url |
| Marketing URL | url |
| Logo URL | url |
| Oauth 2permission scopes | array |
| Service principal type | text |
| Tags | array |
| Verified publisher | text |
List Agent BlueprintsSearch
Input fields[3]
| Field | Type |
|---|---|
| Limit | number |
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| App ID | text |
| Identifier uris | array |
| Created by app ID | text |
| Created date time | date |
| Description | text |
| Disabled by microsoft status | text |
| Display name | text |
| Group membership claims | text |
| Publisher domain | text |
| Sign in audience | text |
| Tags | array |
| Token encryption key ID | text |
| Unique name | text |
| Service management reference | text |
| Optional claims | text |
| API | object |
| Requested access token version | number |
| Accept mapped claims | text |
| Known client applications | array |
| Oauth 2permission scopes | array |
| Pre authorized applications | array |
| Token encryption setting | object |
| App roles | array |
| Info | object |
| Terms of service URL | url |
| Support URL | url |
| Privacy statement URL | url |
| Marketing URL | url |
| Logo URL | url |
5other output fields
List Agent Identity Blueprints PrincipalSearch
Input fields[3]
| Field | Type |
|---|---|
| Limit | number |
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| App ID | text |
| Created date time | date |
| Created by app ID | text |
| Account enabled | boolean |
| App display name | text |
| App owner organization ID | text |
| App role assignment required | boolean |
| App roles | array |
| Disabled by microsoft status | text |
| Info | object |
| Terms of service URL | url |
| Support URL | url |
| Privacy statement URL | url |
| Marketing URL | url |
| Logo URL | url |
| Oauth 2permission scopes | array |
| Service principal type | text |
| Tags | array |
| Verified publisher | text |
List Agent UserSearch
Input fields[3]
| Field | Type |
|---|---|
| Limit | number |
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| Deleted date time | date |
| Sign in activity | object |
| @odata type | text |
| Cloud licensing | object |
| @odata type | text |
| Account enabled | text |
| Age group | text |
| Assigned licenses | array |
| Assigned plans | array |
| Authorization info | text |
| Business phones | array |
| City | text |
| Cloud realtime communication info | object |
| @odata type | text |
| Company name | text |
| Consent provided for minor | text |
| Country | text |
| Created date time | date |
| Creation type | text |
| Department | text |
| Display name | text |
64other output fields
List App Role AssignmentSearch
List App Roles AssignedSearch
List Federated Identity CredentialsSearch
Retrieve a Federated Identity CredentialAction
Retrieve an Agent BlueprintAction
Input fields[3]
| Field | Type |
|---|---|
Object IDRequired | choice |
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| App ID | text |
| Identifier uris | array |
| Created by app ID | text |
| Created date time | date |
| Description | text |
| Disabled by microsoft status | text |
| Display name | text |
| Group membership claims | text |
| Publisher domain | text |
| Sign in audience | text |
| Tags | array |
| Token encryption key ID | text |
| Unique name | text |
| Service management reference | text |
| Optional claims | text |
| API | object |
| Requested access token version | number |
| Accept mapped claims | text |
| Known client applications | array |
| Oauth 2permission scopes | array |
| Pre authorized applications | array |
| Token encryption setting | object |
| App roles | array |
| Info | object |
| Terms of service URL | url |
| Support URL | url |
| Privacy statement URL | url |
| Marketing URL | url |
| Logo URL | url |
5other output fields
Retrieve an Agent Identiy Blueprint PrincipalAction
Input fields[3]
| Field | Type |
|---|---|
Agent Identity Blueprint Principal IDRequired | choice |
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| App ID | text |
| Created date time | date |
| Created by app ID | text |
| Account enabled | boolean |
| App display name | text |
| App owner organization ID | text |
| App role assignment required | boolean |
| App roles | array |
| Disabled by microsoft status | text |
| Info | object |
| Terms of service URL | url |
| Support URL | url |
| Privacy statement URL | url |
| Marketing URL | url |
| Logo URL | url |
| Oauth 2permission scopes | array |
| Service principal type | text |
| Tags | array |
| Verified publisher | text |
Retrieve an Agent UserAction
Input fields[3]
| Field | Type |
|---|---|
Agent User IDRequired | choice |
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| Deleted date time | date |
| Sign in activity | object |
| @odata type | text |
| Cloud licensing | object |
| @odata type | text |
| Account enabled | text |
| Age group | text |
| Assigned licenses | array |
| Assigned plans | array |
| Authorization info | text |
| Business phones | array |
| City | text |
| Cloud realtime communication info | object |
| @odata type | text |
| Company name | text |
| Consent provided for minor | text |
| Country | text |
| Created date time | date |
| Creation type | text |
| Department | text |
| Display name | text |
64other output fields
Add an Agent Blueprint KeyAction
Input fields[3]
| Field | Type |
|---|---|
Object IDRequired | choice |
Key CredentialRequired | object |
TypeRequired | choice |
UsageRequired | choice |
KeyRequired | text |
| Password Credential | object |
| Secret Text | secret |
| Proof | text |
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| Custom key identifier | text |
| Display name | text |
| End date time | date |
| Key | text |
| Key ID | text |
| Start date time | date |
| Type | text |
| Usage | text |
Add an Agent Blueprint PasswordAction
Add App Role AssignmentAction
Input fields[3]
| Field | Type |
|---|---|
Application IDRequired | choice |
Principal Display NameRequired | text |
App Role IDRequired | choice |
Principal IDRequired | choice |
Resource IDRequired | choice |
| Resource Display Name | text |
Output fields[3]
| Field | Type |
|---|---|
| @odata context | text |
| ID | text |
| Created date time | date |
| App role ID | text |
| Principal display name | text |
| Principal ID | text |
| Principal type | text |
| Resource display name | text |
| Resource ID | text |
Assign App RoleAction
Input fields[3]
| Field | Type |
|---|---|
Application IDRequired | choice |
Principal Display NameRequired | text |
App Role IDRequired | choice |
Principal IDRequired | choice |
Resource IDRequired | choice |
| Resource Display Name | text |
Output fields[3]
| Field | Type |
|---|---|
| App role ID | text |
| Created date time | date |
| Deleted date time | date |
| ID | text |
| Principal display name | text |
| Principal ID | text |
| Principal type | text |
| Resource display name | text |
| Resource ID | text |
Create a Federated Identity CredentialAction
Create an Agent BlueprintAction
Input fields[3]
| Field | Type |
|---|---|
Display NameRequired | text |
SponsorsRequired | choice |
| Description | text |
| Identifier URIs | array |
| URI | url |
| Tags | array |
| Tag | text |
| Sign-In Audience | choice |
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| App ID | text |
| Identifier uris | array |
| Created by app ID | text |
| Created date time | date |
| Description | text |
| Disabled by microsoft status | text |
| Display name | text |
| Group membership claims | text |
| Publisher domain | text |
| Sign in audience | text |
| Tags | array |
| Token encryption key ID | text |
| Unique name | text |
| Service management reference | text |
| Optional claims | text |
| API | object |
| Requested access token version | number |
| Accept mapped claims | text |
| Known client applications | array |
| Oauth 2permission scopes | array |
| Pre authorized applications | array |
| Token encryption setting | object |
| App roles | array |
| Info | object |
| Terms of service URL | url |
| Support URL | url |
| Privacy statement URL | url |
| Marketing URL | url |
| Logo URL | url |
5other output fields
Create an Agent Identiy Blueprint PrincipalAction
Input fields[3]
| Field | Type |
|---|---|
Account EnabledRequired | boolean |
Display NameRequired | text |
App Display NameRequired | text |
App IDRequired | choice |
| App Description | text |
| App Owner Organization ID | text |
| App Role Assignment Required | boolean |
| App Roles | array |
| Disabled By Microsoft Status | text |
| Informational URL | object |
| Published Permission Scopes | array |
| Publisher Name | text |
| Service Principal Names | array |
| Service Principal Name | text |
| Service Principal Type | text |
| Tags | array |
| Tag | text |
| Verified Publisher | object |
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| App ID | text |
| Created date time | date |
| Created by app ID | text |
| Account enabled | boolean |
| App display name | text |
| App owner organization ID | text |
| App role assignment required | boolean |
| App roles | array |
| Disabled by microsoft status | text |
| Info | object |
| Terms of service URL | url |
| Support URL | url |
| Privacy statement URL | url |
| Marketing URL | url |
| Logo URL | url |
| Oauth 2permission scopes | array |
| Service principal type | text |
| Tags | array |
| Verified publisher | text |
Create an Agent UserAction
Input fields[3]
| Field | Type |
|---|---|
Identity Parent IDRequired | choice |
Display NameRequired | text |
| Account Enabled | boolean |
| Mail Nickname | text |
| User Principal Name | text |
Output fields[3]
| Field | Type |
|---|---|
| @odata type | text |
| ID | text |
| Deleted date time | date |
| Sign in activity | object |
| @odata type | text |
| Cloud licensing | object |
| @odata type | text |
| Account enabled | text |
| Age group | text |
| Assigned licenses | array |
| Assigned plans | array |
| Authorization info | text |
| Business phones | array |
| City | text |
| Cloud realtime communication info | object |
| @odata type | text |
| Company name | text |
| Consent provided for minor | text |
| Country | text |
| Created date time | date |
| Creation type | text |
| Department | text |
| Display name | text |
64other output fields
Delete a Federated Identity CredentialAction
Input fields[3]
| Field | Type |
|---|---|
Application IDRequired | choice |
| Audiences | array |
| Audience | text |
| Issuer | url |
| Name | text |
| Subject | text |
Delete an Agent BlueprintAction
Input fields[3]
| Field | Type |
|---|---|
Object IDRequired | choice |
Delete an Agent Identiy Blueprint PrincipalAction
Input fields[3]
| Field | Type |
|---|---|
Agent Identity Blueprint Principal IDRequired | choice |
Delete an Agent UserAction
Input fields[3]
| Field | Type |
|---|---|
Agent User IDRequired | choice |
Delete App Role AssignedAction
Input fields[3]
| Field | Type |
|---|---|
Application IDRequired | choice |
Delete App Role AssignmentAction
Input fields[3]
| Field | Type |
|---|---|
Application IDRequired | choice |
Make an API Calluniversal
Remove an Agent Blueprint KeyAction
Input fields[3]
| Field | Type |
|---|---|
Object IDRequired | choice |
Remove an Agent Blueprint PasswordAction
Input fields[3]
| Field | Type |
|---|---|
Object IDRequired | choice |
Update an Agent BlueprintAction
Input fields[3]
| Field | Type |
|---|---|
Object IDRequired | choice |
| Display Name | text |
| Description | text |
| Identifier URIs | array |
| URI | url |
| Tags | array |
| Tag | text |
| Sign-In Audience | choice |
| Sponsors | choice |
Update an Agent Identiy Blueprint PrincipalAction
Input fields[3]
| Field | Type |
|---|---|
Agent Identity Blueprint Principal IDRequired | choice |
| Account Enabled | boolean |
| Display Name | text |
| App Display Name | text |
| App ID | choice |
| App Description | text |
| App Owner Organization ID | text |
| App Role Assignment Required | boolean |
| App Roles | array |
| Disabled By Microsoft Status | text |
| Informational URL | object |
| Published Permission Scopes | array |
| Publisher Name | text |
| Service Principal Names | array |
| Service Principal Name | text |
| Service Principal Type | text |
| Tags | array |
| Tag | text |
| Verified Publisher | object |
Update an Agent UserAction
Input fields[3]
| Field | Type |
|---|---|
Agent User IDRequired | choice |
| Identity Parent ID | choice |
| Display Name | text |
| Account Enabled | boolean |
| Mail Nickname | text |
| User Principal Name | text |
Update Federated Identity CredentialAction
Input fields[3]
| Field | Type |
|---|---|
Application IDRequired | choice |
| Audiences | array |
| Audience | text |
| Issuer | url |
| Name | text |
| Subject | text |
Templates
Look for Microsoft Entra Agent ID templates in the WEXTL template library.
Browse templates →Explore alternative apps
- Bitwarden[2]Manage organization members, groups, collections, and policies in Bitwarden.
- BoxStore, share, and automate files and folders in Box.
- BitbucketBitbucket Cloud REST 2.0 — repositories, pull requests, pipelines, commits, and webhooks.
- AWS CognitoAmazon Cognito User Pools — manage users, groups, app clients, and identity providers with SigV4.
- Azure StorageManage containers and blobs in Azure Blob Storage.
References
- WEXTL® Microsoft Entra Agent ID Source Code connector implementation.
- Our users use cases and automations.
- Official API Documentation for Microsoft Entra Agent ID.
- WEXTL® visual workflow builder data.
Last updated: Jul 24, 2026 18:12