Securing AI Agent Identities and Copilot Studio Agents

As organizations increasingly adopt AI agents to automate processes, access enterprise data, and interact with business systems, securing these agents has become a critical responsibility for Cloud and AI Security Engineers.

In this session, we will explore how Microsoft security technologies can help organizations manage AI agent identities, control their access to resources, assess identity-related risks, and protect Copilot Studio agents against threats during runtime.

AI agents can authenticate to services, access data, call APIs, perform actions, and make decisions on behalf of users or business processes. When these identities are overprivileged, poorly governed, or compromised, they can expose sensitive information and create new attack paths across the organization.

This session will introduce participants to the security controls available across:

• Microsoft Entra Agent ID
• Microsoft Entra Conditional Access
• Microsoft Defender XDR
• Microsoft Defender for Cloud Apps
• Microsoft Copilot Studio

Participants will learn how to apply Zero Trust principles to AI agents by verifying their identities, limiting their permissions, assessing their potential blast radius, investigating attack paths, and enabling runtime protection.

What You Will Learn

By the end of the session, participants should be able to:

• Explain how AI agents authenticate and access enterprise resources
• Understand the purpose of Microsoft Entra Agent ID
• Identify where Conditional Access can be applied to agent identities
• Configure Conditional Access policies for AI agents
• Control agent access based on organizational security requirements
• Manage agent identity ownership and lifecycle events
• Discover AI agents through the Microsoft Defender XDR agent inventory
• Review the permissions and knowledge sources available to an AI agent
• Assess the potential blast radius of a compromised agent identity
• Analyze attack paths that could lead to unauthorized access
• Understand the protection capabilities available for Copilot Studio agents
• Enable runtime protection through the Microsoft Defender portal
• Review AI agent alerts and security information in Defender XDR
• Use Advanced Hunting data to investigate activities involving protected agents
• Apply Zero Trust and least-privilege principles to AI agent deployments

Who Should Attend?

This session is suitable for:

• Participants in the Cloud and AI Security Bootcamp
• Cloud and AI Security Engineers
• Identity and Access Administrators
• Microsoft 365 and Azure Security Administrators
• SOC and Security Operations Analysts
• Microsoft Defender XDR administrators
• Microsoft Copilot Studio administrators and makers
• Cloud Security Architects
• Governance, Risk, and Compliance professionals
• DevSecOps and platform-security engineers
• Professionals preparing for the SC-500 certification
• Anyone interested in securing enterprise AI agents

Why You Should Attend

AI agents introduce a new category of identities, permissions, data access, and security risks that organizations must understand and govern.

This session will provide a practical foundation for securing AI agents across their identity and runtime lifecycle. It will help participants understand how Microsoft Entra, Microsoft Defender XDR, Microsoft Defender for Cloud Apps, and Copilot Studio work together to provide visibility, control, threat detection, and protection.

Come prepared to learn, ask questions, and strengthen your understanding of enterprise AI security.

Learn. Connect. Secure the Future of AI.