How Microsoft Is Securing AI Agents in Entra - Conditional Access, Zero Trust & the "Block" Debate

Entra.Chat

0:00

-43:43

How Microsoft Is Securing AI Agents in Entra - Conditional Access, Zero Trust & the "Block" Debate

Why Your AI Agent Has No Login Pattern

Merill Fernando

Jun 13, 2026

AI agents can make decisions and act faster than any human — which means your old identity security playbook no longer holds. In this episode of Entra Chat, [host name] sits down with Nikhil, a 10+ year Microsoft identity veteran from the Authentication Stack and Identity Protection team, to break down how Microsoft Entra, Conditional Access, Defender, and Purview are evolving to secure agentic AI.

We get into why “security = MFA” is dead, why the only recommended Conditional Access control for agents today is block (and why that’s actually good for your users), the missing “challenge” state in agent access, indirect prompt injection, and the unified risk model spanning identity, endpoint, and data layers. If you manage Microsoft Entra ID, run Zero Trust, or are figuring out how to govern AI agents in your tenant, this one’s for you.

🔎 What you’ll learn:

Why agents are the new insider threat and why latency no longer protects you
How Conditional Access now targets agentic users and agents
Why “block” is the default control for agents (allow / block / challenge explained)
How unified risk works across Entra, Microsoft Defender & Microsoft Purview
Continuous Access Evaluation interrupting in-motion agent sessions
Why LLMs recommend insecure defaults (the device code flow problem)
The Conditional Access optimization agent, report-only mode & phased rollout
The #1 thing Entra admins and CISOs should do in the next 3–6 months

Subscribe with your favorite podcast player or watch on YouTube 👇

About Nikhil

Nikhil Boreddy has spent over a decade at Microsoft, from the early Authentication Stack and Identity Protection team to the birth of Conditional Access. Today he works across Entra and Microsoft Security on one of the toughest challenges in the field: securing AI agents in the enterprise.

LinkedIn - https://www.linkedin.com/in/nikhilboreddy/