DEV Community

Anton Staykov profile picture

Anton Staykov

Principal PM Architect, Microsoft Security — building the identity foundation for AI agents (Entra Agent ID). I write hands-on architecture guides on agent identity, Zero Trust, and workload identity

Location Germany Joined Joined on  Personal website https://www.linkedin.com/in/astaykov/

Education

M.Sc. in Software Engineering | B.A. in Telecommunications | Electrical Engineering professional

Work

Principal PM Architect, Microsoft Security at Microsoft

Your SPIFFE workload can authenticate as an Entra Agent ID, but mind the trust gap

Your SPIFFE workload can authenticate as an Entra Agent ID, but mind the trust gap

Comments
14 min read
Microsoft Graph least privilege has two control planes

Microsoft Graph least privilege has two control planes

Comments
11 min read
Enterprise architects: your overdue Entra decision is an agent CSA schema

Enterprise architects: your overdue Entra decision is an agent CSA schema

Comments
6 min read
How enterprise architects should decide Entra Agent ID blueprint boundaries for non-Microsoft platforms

How enterprise architects should decide Entra Agent ID blueprint boundaries for non-Microsoft platforms

Comments
6 min read
Access packages are the control plane for Entra Agent ID permissions

Access packages are the control plane for Entra Agent ID permissions

Comments
6 min read
Every change to an Entra extension is a Control Plane event: the monitoring contract

Every change to an Entra extension is a Control Plane event: the monitoring contract

Comments
10 min read
Securing the code that decides who Entra trusts: a Function App and a Logic App, end to end

Securing the code that decides who Entra trusts: a Function App and a Logic App, end to end

Comments
10 min read
Microsoft Entra extensibility is a gift. It is also Control Plane.

Microsoft Entra extensibility is a gift. It is also Control Plane.

Comments
9 min read
One identity, two clouds: an AWS-hosted agent that authorizes with Microsoft Entra Agent ID

One identity, two clouds: an AWS-hosted agent that authorizes with Microsoft Entra Agent ID

Comments
7 min read
A transformational AI agent does not start with the permissions it needs

A transformational AI agent does not start with the permissions it needs

1
Comments
10 min read
Seeing every agent sign-in in one place: an Azure Monitor workbook for Entra Agent ID

Seeing every agent sign-in in one place: an Azure Monitor workbook for Entra Agent ID

1
Comments
6 min read
Your AI agent doesn't need a PAT to work in Azure DevOps

Your AI agent doesn't need a PAT to work in Azure DevOps

Comments 1
10 min read
Your agentic platform doesn't need a single secret: Managed Identities, Workload Identity Federation and Agent Identity Blueprints

Your agentic platform doesn't need a single secret: Managed Identities, Workload Identity Federation and Agent Identity Blueprints

Comments 1
7 min read
Finding Out What Your AI Agents Actually Got: Discovering Consents and Active Agents in Microsoft Entra

Finding Out What Your AI Agents Actually Got: Discovering Consents and Active Agents in Microsoft Entra

2
Comments 1
6 min read
Your AI Agent Doesn't Need an API Key: Entra Agent ID and Anthropic's Workload Identity Federation

Your AI Agent Doesn't Need an API Key: Entra Agent ID and Anthropic's Workload Identity Federation

1
Comments
8 min read
Your Agent Is Becoming the Crown Jewel: SOC, Reviews, and Governance for the Dynamic-Consent Era

Your Agent Is Becoming the Crown Jewel: SOC, Reviews, and Governance for the Dynamic-Consent Era

Comments
4 min read
The Overlooked Gem in Microsoft Entra That Gives Your AI Agents Super-Powers

The Overlooked Gem in Microsoft Entra That Gives Your AI Agents Super-Powers

Comments
4 min read
Paying to Be the Product: The AI Privacy Illusion Nobody's Talking About

Paying to Be the Product: The AI Privacy Illusion Nobody's Talking About

Comments
8 min read
From OBO APIs to Agent Identities: Entra Conditional Access Still Works the Same

From OBO APIs to Agent Identities: Entra Conditional Access Still Works the Same

2
Comments
5 min read
loading...