Anton Staykov

Principal PM Architect, Microsoft Security — building the identity foundation for AI agents (Entra Agent ID). Opinions I express are my own and shall not be associated with my employer.

Germany Joined on Mar 16, 2026 https://www.linkedin.com/in/astaykov/

Education

M.Sc. in Software Engineering | B.A. in Telecommunications | Electrical Engineering professional

Work

Principal PM Architect, Microsoft Security at Microsoft

Pinned

Anton Staykov

Sep 8

Your API gateway is not an identity provider, and promoting it to one is a liability

#apigateway #oauth #enterprisearchitecture #aiagents

20 min read

Anton Staykov

Jul 14

The industry does not have an agent identity propagation standard yet

#entraagentid #identitystandards #oauth #aiagents

13 min read

Anton Staykov

Sep 16

How an AWS-hosted Entra Agent ID drops the client secret

#entraagentid #workloadidentity #aws #cloudsecurity

15 min read

Anton Staykov

Sep 3

AI agents need an authorization domain beyond OAuth

#oauth #identitygovernance #aiagents

11 min read

Anton Staykov

Aug 27

Authorization options for your AI agents with Entra Agent ID

#entraagentid #identitygovernance #microsoftentra #aiagents

13 min read

Anton Staykov

Aug 25

Flexibility with admin consent in Entra: how to scale consent flows for AI agents

#aiagents #zerotrust #microsoftentra #cloudsecurity

9 min read

Anton Staykov

Aug 17

Dynamic client registration and CIMD are not a trust framework

#oauth #security #zerotrust #apimanagement

10 min read

Anton Staykov

Aug 12

Why consent is the trust contract for Entra Agent ID

#entraagentid #identitygovernance #microsoftentra #aiagents

11 min read

Anton Staykov

Aug 6

From JWT-SVID to Entra Agent ID: a working SPIFFE PoC

#entraagentid #spiffe #workloadidentity #identitysecurity

14 min read

Anton Staykov

Aug 4

Your SPIFFE workload can authenticate as an Entra Agent ID, but mind the trust gap

#entraagentid #spiffe #workloadidentity #identitysecurity

14 min read

Anton Staykov

Jul 28

Microsoft Graph least privilege has two control planes

#microsoftgraph #microsoftentra #leastprivilege #appsecurity

11 min read

Anton Staykov

Jul 23

Enterprise architects: your overdue Entra decision is an agent CSA schema

#entraagentid #customsecurityattributes #aiagents #zerotrust

6 min read

Anton Staykov

Jul 21

How enterprise architects should decide Entra Agent ID blueprint boundaries for non-Microsoft platforms

#entraagentid #identitygovernance #aiagents #zerotrust

6 min read

Anton Staykov

Jul 9

Access packages are the control plane for Entra Agent ID permissions

#entraagentid #identitygovernance #microsoftentra #aiagents

6 min read

Anton Staykov

Jul 7

Every change to an Entra extension is a Control Plane event: the monitoring contract

#microsoftentra #azuremonitor #zerotrust #secops

10 min read

Anton Staykov

Jul 2

Securing the code that decides who Entra trusts: a Function App and a Logic App, end to end

#microsoftentra #managedidentity #identitygovernance #zerotrust

10 min read

Anton Staykov

Jun 30

Microsoft Entra extensibility is a gift. It is also Control Plane.

#microsoftentra #zerotrust #identitygovernance #cloudadoptionframework

9 min read

Anton Staykov

Jun 23

One identity, two clouds: an AWS-hosted agent that authorizes with Microsoft Entra Agent ID

#entraagentid #aws #bedrockagentcore #aiagents

7 min read

Anton Staykov

Jun 17

A transformational AI agent does not start with the permissions it needs

#entraagentid #n8n #identitygovernance #aiagents

10 min read

Anton Staykov

Jun 10

Seeing every agent sign-in in one place: an Azure Monitor workbook for Entra Agent ID

#entra #entraagentid #aiagents #azuremonitor

6 min read

Anton Staykov

Jun 4

Your AI agent doesn't need a PAT to work in Azure DevOps

#entraagentid #azuredevops #aiagents #identity

10 min read

Anton Staykov

May 28

Your agentic platform doesn't need a single secret: Managed Identities, Workload Identity Federation and Agent Identity Blueprints

#microsoftentra #entraagentid #aiagents #wif

7 min read

Anton Staykov

May 25

Finding Out What Your AI Agents Actually Got: Discovering Consents and Active Agents in Microsoft Entra

#ai #entraagentid #aisecurity

6 min read

Anton Staykov

May 21

Your AI Agent Doesn't Need an API Key: Entra Agent ID and Anthropic's Workload Identity Federation

#entra #aiagents #anthropic #security

8 min read

Anton Staykov

May 18

Your Agent Is Becoming the Crown Jewel: SOC, Reviews, and Governance for the Dynamic-Consent Era

#ai #entraagentid #security

4 min read

Anton Staykov

May 9

The Overlooked Gem in Microsoft Entra That Gives Your AI Agents Super-Powers

#ai #entraagentid #agents #cybersecurity

4 min read

Anton Staykov

Apr 27

Paying to Be the Product: The AI Privacy Illusion Nobody's Talking About

#privacy #ai #agents

8 min read

Anton Staykov

Mar 16

From OBO APIs to Agent Identities: Entra Conditional Access Still Works the Same

#ai #microsoft #entra

5 min read

DEV Community

Anton Staykov

Badges

Writing Debut

GitHub Repositories

Currently learning

Pinned

Your API gateway is not an identity provider, and promoting it to one is a liability

The industry does not have an agent identity propagation standard yet

How an AWS-hosted Entra Agent ID drops the client secret

AI agents need an authorization domain beyond OAuth

Authorization options for your AI agents with Entra Agent ID

Flexibility with admin consent in Entra: how to scale consent flows for AI agents

Dynamic client registration and CIMD are not a trust framework

Why consent is the trust contract for Entra Agent ID

From JWT-SVID to Entra Agent ID: a working SPIFFE PoC

Your SPIFFE workload can authenticate as an Entra Agent ID, but mind the trust gap

Microsoft Graph least privilege has two control planes

Enterprise architects: your overdue Entra decision is an agent CSA schema

How enterprise architects should decide Entra Agent ID blueprint boundaries for non-Microsoft platforms

Access packages are the control plane for Entra Agent ID permissions

Every change to an Entra extension is a Control Plane event: the monitoring contract

Securing the code that decides who Entra trusts: a Function App and a Logic App, end to end

Microsoft Entra extensibility is a gift. It is also Control Plane.

One identity, two clouds: an AWS-hosted agent that authorizes with Microsoft Entra Agent ID

A transformational AI agent does not start with the permissions it needs

Seeing every agent sign-in in one place: an Azure Monitor workbook for Entra Agent ID

Your AI agent doesn't need a PAT to work in Azure DevOps

Your agentic platform doesn't need a single secret: Managed Identities, Workload Identity Federation and Agent Identity Blueprints

Finding Out What Your AI Agents Actually Got: Discovering Consents and Active Agents in Microsoft Entra

Your AI Agent Doesn't Need an API Key: Entra Agent ID and Anthropic's Workload Identity Federation

Your Agent Is Becoming the Crown Jewel: SOC, Reviews, and Governance for the Dynamic-Consent Era

The Overlooked Gem in Microsoft Entra That Gives Your AI Agents Super-Powers

Paying to Be the Product: The AI Privacy Illusion Nobody's Talking About

From OBO APIs to Agent Identities: Entra Conditional Access Still Works the Same