Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Practice Checkpoint 1: Building Agent ID with MS Graph

semperis.com | blog | #agentic-ai | #active-directory | #entra-id | #powershell | #tutorial | #semperis | #agent-identity | #microsoft-graph

Summary

Semperis' first practice checkpoint builds a real Entra ID Agent ID object set — blueprint, blueprint principal, credentials, agent identity and agent user — using Microsoft Graph and PowerShell.
Published
Collected

original ↗

Related coverage

blog · semperis.com
How to Redefine Cyber Resilience: Start by Rethinking Hybrid Identity Protection
Semperis argues AI-driven attacks are outpacing identity teams as machine identities outnumber human ones 10:1, and urges building organization-wide cyber resilience around hybrid identity protection before the next crisis.
blog · semperis.com
Practice Checkpoint 4: Verifying Tokens and Claims in 3 Entra ID Authentication Flows
A hands-on checkpoint walking through Entra ID's three agent authentication flows (autonomous, OBO, agent-user), decoding tokens to show how claims map to blueprints, identities and permissions.
blog · semperis.com
Practice Checkpoint 2: Setting Agent Identity Permissions
Semperis practice checkpoint two wires up the Entra ID agent permission model: direct app-only roles on the agent identity plus inheritable delegated permissions granted at the blueprint level.
blog · semperis.com
EntraGoat Scenario 2: Exploiting App-Only Graph Permissions in Entra ID
EntraGoat Scenario 2: a certificate leaked through CI/CD artifacts leads to app-only Graph permission abuse — self-assigning RoleManagement.ReadWrite.Directory and resetting the Global Admin password.
blog · semperis.com
Getting Started with EntraGoat: Breaking Entra ID the Smart Way
A quick-start guide to EntraGoat: test tenant, Node.js and PowerShell 7 prerequisites, cloning the lab, launching your first challenge, capturing flags and cleaning up afterwards.
blog · semperis.com
Power up Entra ID Security Assessments
Semperis offers a PowerShell script that automates Entra ID app registration for free Purple Knight assessments, requiring Microsoft.Graph.Applications, Az.Accounts, and Global Admin rights.
back