entra-id-aspire-provisioning

Automate Entra ID provisioning by running this Skill after integrating Microsoft.Identity.Web authentication into your Aspire projects. It detects eligible projects, creates API and Web App registrations, configures scopes and redirect URIs from launch settings, stores secrets securely in user secrets, and updates appsettings.json files automatically.

You need the Microsoft Graph PowerShell SDK installed and configured for interactive authentication. The Skill requires existing .NET Aspire projects with Microsoft.Identity.Web integrated, plus appropriate permissions in Entra ID to create app registrations and manage service principals.

Yes. The Skill discovers redirect URIs from launch settings across all eligible projects in your Aspire application, automatically configures them in the Entra ID app registrations, and updates appsettings.json files in each project with the correct configuration values.

The Skill generates API secrets in Entra ID and stores them securely using .NET user secrets instead of plain-text configuration. It updates app settings to reference these secrets, enabling seamless sign-in and API access without exposing credentials in appsettings.json files.

Yes. The Skill uses interactive prompts to let you choose between creating new Entra ID app registrations or linking to existing ones. This flexibility supports scenarios where you already have registrations configured and want to update configuration across your Aspire projects.

For API registrations, the Skill configures App ID URIs and scopes. For Web App registrations, it sets redirect URIs and service principals. Both registration types are updated with configuration details needed for authentication and authorization in your Aspire applications.