Configure User Authentication for an Agent in Microsoft Power Pages
Configure User Authentication for an Agent in Microsoft Power Pages
Microsoft Power Pages allows organizations to secure AI Agents using various authentication methods. Authentication ensures that only authorized users can access protected resources while providing a seamless sign-in experience across websites and AI-powered interactions.
Tip: Choosing the correct authentication method helps balance security requirements and user experience when interacting with AI Agents.Authentication Options for Power Pages Agents
Power Pages provides multiple authentication methods for AI Agents, allowing organizations to secure access according to business requirements.
| Authentication Type | Description |
|---|---|
| No Authentication | Users can access the Agent without signing in. |
| Token Passthrough | Uses existing Power Pages authentication and passes identity information securely. |
| Token-Based Authentication | Passes user tokens to Copilot Studio, which handles authentication and authorization. |
1. No Authentication
No Authentication is the default configuration for Power Pages Agents. Users can interact with the Agent without signing in.
- No login required.
- Quick setup.
- Suitable for public websites.
- Best for general information and FAQs.
2. Token Passthrough Authentication
Token Passthrough uses the existing Power Pages authentication mechanism. The authenticated user's identity is securely passed to the Agent, enabling personalized and secure interactions.
Benefits
- Supports all Power Pages identity providers.
- Provides seamless Single Sign-On (SSO).
- Improves user experience.
- Maintains secure identity validation.
Configuration Steps
- Open Agent settings.
- Select Token Passthrough.
- Configure Generic OAuth 2 settings.
- Enter placeholder OAuth values.
- Save and publish the configuration.
3. Token-Based Authentication
Token-Based Authentication passes the authenticated user's token directly to Copilot Studio. Copilot Studio validates the token and manages authentication independently.
Benefits
- Supports enterprise authentication scenarios.
- Enables advanced authorization controls.
- Provides enhanced security.
- Works with Generic OAuth 2 providers.
Required Site Settings
| Site Setting | Value / Description |
|---|---|
| Authentication/ApplicationCookie/SlidingExpiration | True |
| Authentication/BearerAuthentication/Enabled | True |
| Authentication/BearerAuthentication/Provider | Provider name from existing authentication settings. |
| Authentication/OpenIdConnect/{ProviderName}/Issuer | Replace ProviderName with your identity provider such as AzureAD. |
Single Sign-On (SSO)
Single Sign-On allows users to authenticate once and access both the Power Pages website and AI Agent without additional sign-in prompts. This creates a seamless and secure user experience.
Success: SSO reduces login friction while maintaining enterprise-grade security and compliance standards.Best Practices
- Use Token Passthrough for seamless user experiences.
- Enable Token-Based Authentication for sensitive business data.
- Regularly review authentication settings.
- Use Microsoft Entra ID where possible.
- Monitor authentication logs and activity.
- Follow organizational security policies.
Summary
Power Pages provides flexible authentication options for AI Agents, including No Authentication, Token Passthrough, and Token-Based Authentication. By selecting the appropriate authentication model and implementing Single Sign-On, organizations can deliver secure, personalized, and seamless AI-powered experiences.