Support for Entra User Identity Passthrough to Remote MCP (SQL MCP Server) in Azure AI Foundry (Prompt Agent vs. Hosted Agent)

Azure AI Foundry: Entra User Identity Passthrough to Remote MCP (Prompt Agent vs. Hosted Agent)

Hello Microsoft Community,

I'm trying to determine whether Azure AI Foundry supports end-user identity passthrough when invoking a Remote MCP Server (SQL MCP Server).

Scenario

Multiple Microsoft Entra authenticated users access the same AI agent.

The backend data source is protected through:

• Microsoft Entra ID
• OAuth access tokens
• Data API Builder
• SQL Row-Level Security (RLS)

End User

→ Azure AI Foundry Agent

→ Remote MCP Server

→ Data API Builder

→ SQL Database

The database derives the user context exclusively from the signed Entra access token (oid claim) and enforces RLS.

What works

When calling the MCP Server directly with a delegated Entra access token:

• Token validation succeeds
• User identity is available
• RLS returns only that user's data

What does not work

We tested a Prompt Agent with a custom Remote MCP OAuth connection.

The agent can:

• connect to the MCP server
• discover tools
• execute tools

However, RLS returns no data when the call originates from the Prompt Agent, while the same call works when executed directly with the end-user token.

This makes us suspect that the user's delegated Entra identity is not being passed through to the Remote MCP Server.

Questions

Does Azure AI Foundry Prompt Agent support forwarding the authenticated end-user's Entra access token to a Remote MCP Server?

If yes, what configuration is required?

• Connection type
  • OAuth flow
    • Delegated scopes
      • Consent requirements
        • Identity passthrough configuration
        If Prompt Agents do not support this scenario, do Hosted Agents support it? Can a Hosted Agent access and forward the authenticated user's Entra token to a Remote MCP Server? If neither agent type supports this, is the recommended architecture:

Client

→ Custom Backend

→ Delegated User Token

→ Remote MCP Server

→ RLS-filtered Result

→ AI Agent

1. Is there any official Microsoft documentation or reference architecture covering:
   • Azure AI Foundry Agents
     • Remote MCP
       • Entra delegated identity
         • Row-Level Security
           • Managed Identity for SQL access

Reference:

Configure Authentication for SQL MCP Server

Thank you for any guidance or product clarification.