---
title: "Using on-behalf-of flow for Entra-based MCP servers"
url: https://daily.dev/posts/using-on-behalf-of-flow-for-entra-based-mcp-servers-ctc7a7wlt
source_url: https://blog.pamelafox.org/2026/01/using-on-behalf-of-flow-for-entra-based.html
type: article
source: "Pamela Fox"
published: 2026-01-16T20:35:00.295Z
updated: 2026-01-16T20:35:21.627Z
tags: ["python", "azure", "authentication", "oauth"]
reading_time: 8
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Using on-behalf-of flow for Entra-based MCP servers

**[Pamela Fox](https://daily.dev/sources/pamelafox)** · 8 min read · 0 upvotes · 0 comments

## Summary

The on-behalf-of (OBO) flow enables MCP servers to use a user's identity to call other APIs like Microsoft Graph. This guide demonstrates implementing Entra authentication with OBO in Python FastMCP servers, covering app registration setup, admin consent configuration, and token exchange. The implementation uses FastMCP's AzureProvider with an OAuth proxy pattern for dynamic client registration, MSAL SDK for token management, and includes practical examples like checking group membership and storing user-specific data in Cosmos DB.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://blog.pamelafox.org/2026/01/using-on-behalf-of-flow-for-entra-based.html>

## Similar posts on daily.dev

- [Building MCP servers with Entra ID and pre-authorized clients](https://daily.dev/posts/building-mcp-servers-with-entra-id-and-pre-authorized-clients-rybvjzni4) · Pamela Fox · 0 upvotes · 0 comments
- [MCP Tools acting On‑Behalf‑Of Users in Orchestrate Agents](https://daily.dev/posts/mcp-tools-acting-on-behalf-of-users-in-orchestrate-agents-ruxs25d67) · Niklas Heidloff · 1 upvotes · 0 comments
- [Audit Frontier AI Agents with SQL MCP Server](https://daily.dev/posts/audit-frontier-ai-agents-with-sql-mcp-server-tehcufclf) · DevBlogs · 0 upvotes · 0 comments

---

Tags: [#python](https://daily.dev/tags/python), [#azure](https://daily.dev/tags/azure), [#authentication](https://daily.dev/tags/authentication), [#oauth](https://daily.dev/tags/oauth)

[View this post on daily.dev](https://daily.dev/posts/using-on-behalf-of-flow-for-entra-based-mcp-servers-ctc7a7wlt)