2026-05-08 - Full Authentication Migration to the Identity Service¶
Release¶
AgileData.io - One Auth Layer to Rule Them All: APIs and WebSockets Now Use the Identity Service
With the identity service launched in May, the rest of the AgileData platform now authenticates through it. This month’s work moved the APIs, the MCP server and real-time (WebSocket) connections onto the identity service.
MCP server authentication — The MCP server no longer runs its own sign-in logic. It relies on the identity service, so AI tools and browser users sign in through the same path.
Microsoft group memberships — For Microsoft users, Entra group memberships are now recorded in AgileData every time the user signs in. Group changes in Entra take effect at the user’s next sign-in.
Secure real-time connections — Real-time connections between your browser and AgileData now carry a short-lived access token that refreshes automatically. This completes the move to token-based authentication across the platform.
What’s New:
MCP server authentication handled by the identity service
Entra group memberships recorded in AgileData on every sign-in
Real-time connections secured with short-lived, automatically refreshed tokens
Invite emails updated for the new login flow
What this means for you:
Consistent, reliable authentication for all paths into AgileData — browser, MCP, and WebSocket
Microsoft users’ Entra group memberships automatically govern their AgileData access
A simpler, more auditable authentication architecture with fewer moving parts
Last Refreshed¶
Doc Refreshed: 2026-10-25