In an autonomous development workflow, agents act on behalf of users, services, and entire teams. But when an AI system commits code, updates an agile backlog, or triggers a deployment pipeline, traditional user-based authentication models completely fall apart. To maintain accountability and prevent credential abuse, enterprises must treat AI agents as distinct, manageable non-human identities.
This deeply technical architecture session uses our 7-phase agentic software orchestrator to demonstrate how to implement enterprise-grade authentication and authorization frameworks. We will explore how to map multi-agent pipelines to Microsoft Entra Workload Identities and non-human IDs, ensuring every agent operates under strict least-privilege constraints. We will dissect token management across local infrastructure (Phi via Ollama) and cloud APIs (Azure GPT-4o), and outline how to handle access lifecycles so you can confidently answer the ultimate audit question: Who authorized this agentic action?
Participant Takeaways:

- Entra ID Integration: Designing a least-privilege framework using Entra Workload Identities tailored specifically for autonomous AI agents.
- Token & Lifecyle Management: Best practices for secure authentication handoffs across a multi-stage local and cloud AI pipeline.
- Auditing & Accountability: Establishing clear cryptographic and identity trails to link agent actions back to human owners and compliance frameworks.