PingOne Privilege

Configuring AI Foundry

Connect Azure AI Foundry as a workload agent application so AI discovery for workload agents can review the agents running in the subscription. Learn more in Discover and manage workload agents.

  1. In the PingOne Privilege admin console, go to AI Security > Workload Agents.

  2. Click the Add Application tab.

  3. In the list of available applications, find AI Foundry and click Integrate.

  4. Enter a Name for the connection.

  5. (Optional) Enter a Description.

  6. Click Next.

  7. Create an Entra ID App Registration and assign to it the following Azure role-based access control (RBAC) roles:

    • Reader (Subscription)

    • Foundry User (Subscription)

    • Foundry Project Manager (Subscription)

    • Cognitive Services Contributor (AI Services account)

    • User Access Administrator (Subscription) or Custom role (roleAssignments/read + roleAssignments/delete)

  8. Click Next.

  9. Enter your Tenant ID, Client ID, Client Secret, and Subscription ID, then click Next.

  10. Review the summary, then click Add Connection.

You can now validate that the connection is active in the Active Applications tab.