1What a Managed Identity Is: An Identity Nobody Holds a Key ForHow Azure gives a piece of software its own sign-in, renews it quietly, and keeps the key out of every person's hands, including yours.Foundational 2Federated Credentials, Plainly: Trusting Another System's TokenHow a program running in GitHub, Kubernetes or another cloud can reach Azure with no stored password, and why three short text fields decide whether it gets in.Foundational 3Choosing How a Workload Proves Itself: Secret, Certificate, Managed Identity or FederationFour ways a piece of software can sign in to Microsoft Entra ID, what each one asks of the people who run it, and a simple order for choosing between them.Foundational