Agent authentication

Also known as: unauthenticated agent, public agent

Agent authentication decides whether users must sign in to chat with a Copilot Studio agent. With No authentication, anyone who has the link can use the agent.

Copilot Studio offers three options: No authentication, Authenticate with Microsoft and Authenticate manually. An agent without authentication can only reach public information, but anyone with the link can chat with it.

A public agent answers people you do not know. If it is also connected to internal content, that content can reach them.

For example, the policy template Unauthenticated Public Agent Security Risk flags agents exposed publicly without authentication requirements, with a High severity.

Rencore Governance reads each agent’s Authentication Mode, Authentication Trigger and connected Entra ID application into the inventory, so you can filter and report on them.