Identities assigned to software (applications, services, scripts, or containers) to authenticate and access resources. In Microsoft Entra they are applications, service principals, and managed identities.
In SC-900 they are part of the identity types since the October 2026 outline. Conditional Access for workload identities requires Microsoft Entra Workload ID licenses, because user P1/P2 licenses don't cover them. AI agents get their own identities with Microsoft Entra Agent ID.
Workload identities is a concept that can show up on the exam. Check the full guide to see it in context.