Skip to content
Talk to Us

Blocks.ai publishes this comparison and sells in this market. Every claim about another product links to a public source.

Microsoft Agent 365 vs Workday Agent System of Record

Microsoft Agent 365

Microsoft 365 control plane to discover, manage, govern, and secure AI agents

Workday Agent System of Record

Workday system of record to find, add, register, configure, monitor, and manage AI agents

Short answer

Microsoft Agent 365 is a Microsoft 365 control plane for agents; Workday Agent System of Record (ASOR), in each Workday tenant, registers and manages agents.⁠Source 1, Source 2, Source 3 Agent 365 licenses premium capabilities per user, with agent identities in Entra Agent ID; ASOR gives each agent a unique Workday identity and needs no additional specific SKU.⁠Source 2, Source 4, Source 5, Source 6, Source 7

By Blocks.ai teamLast checked

Where each one sits

Six layers of running AI agents at a company, and what each product’s own public sources say it covers.

These aren’t the same kind of product

Where they overlap
Both keep a registry of agents, manage agent identities, control what agents can access, let admins block or deactivate agents, and record agent activity.⁠Source 1, Source 2, Source 4, Source 6, Source 7, Source 8, Source 9, Source 10, Source 11, Source 12
Where they differ
Agent 365 admins work in the Microsoft 365 admin center under Entra admin roles.⁠Source 13 ASOR is set up per Workday tenant; for agents working with Workday, tools are Workday APIs.⁠Source 2, Source 3
Running both
Workday announced an ASOR integration with Microsoft Entra Agent ID in September 2025; Microsoft’s docs say agent identities live in Entra Agent ID.⁠Source 4, Source 14
Public sources · checked 2 October 2026
  • Offered
  • Preview
  • Not included
  • Not publicly documented

Microsoft Agent 365

  • Build agents: Not includedUse your chosen framework⁠Source 15
  • Host and run agents: Not includedYou host your agent⁠Source 16
  • Identity and access: OfferedEntra Agent ID⁠Source 4
  • Registry and governance: OfferedAgent registry in admin center⁠Source 8
  • Traffic between agents, tools, and models: PreviewTooling Gateway for MCP servers⁠Source 17
  • Agents across organizations: Not publicly documented

Workday Agent System of Record

  • Build agents: Not publicly documented
  • Host and run agents: Not publicly documented
  • Identity and access: OfferedAgent System User per agent⁠Source 6
  • Registry and governance: OfferedAgent Registry in Management Hub⁠Source 2
  • Traffic between agents, tools, and models: OfferedAgent Gateway for Workday APIs⁠Source 18
  • Agents across organizations: Not publicly documented

At a glance

TopicMicrosoft Agent 365Workday Agent System of Record
Where it livesA Microsoft 365 service, administered in the Microsoft 365 admin center, Microsoft Entra, and Microsoft Purview.⁠Source 1, Source 19A functional area you enable in each Workday tenant.⁠Source 3
Agents it coversMicrosoft and non-Microsoft agents, wherever they run, such as Azure, AWS, Google Cloud, or on premises.⁠Source 16, Source 20 Premium capabilities may vary by agent type and platform.⁠Source 5Workday-built, partner-built, and self-built agents.⁠Source 2 External agents are registered through the ASOR API.⁠Source 21
Agent identityAgent identities live in Microsoft Entra Agent ID, though the inventory also lists agents without one.⁠Source 4, Source 20A unique Workday identity per agent, using Agent System User accounts governed by Workday security policies and groups.⁠Source 6, Source 7
Pricing modelLists at $15 per user per month, or in Microsoft 365 E7.⁠Source 5 Basic identity and inventory come with Microsoft Cloud subscriptions; enterprise customers need Microsoft 365 E5, or E3 with the Defender and Purview suites.⁠Source 5No additional specific SKU for ASOR.⁠Source 2 Workday-built agents consume Flex Credits, by skill, on Workday’s rate card.⁠Source 22 A credit’s price is not publicly documented.
Generally availableSince 1 May 2026, for the Commercial segment.⁠Source 19Generally available since February 2026.⁠Source 23

What each one is

Microsoft Agent 365

Microsoft Agent 365 is a Microsoft 365 service that provides a centralized control plane to discover, manage, govern, and secure AI agents.⁠Source 1 Microsoft says it works with agents built on Microsoft platforms and with agents built or acquired from third parties.⁠Source 1

Workday Agent System of Record

Workday Agent System of Record (ASOR) is a functional area of a Workday tenant for finding, registering, configuring, monitoring, and managing AI agents.⁠Source 2, Source 3 Workday calls it the single source of truth for a company’s agents, whether Workday, the customer, or a partner built them.⁠Source 23

The differences that matter

  1. Which agents each one covers

    Microsoft Agent 365

    Agent 365’s registry covers Microsoft and non-Microsoft agents; agents built outside Microsoft 365 channels and Entra Agent ID need extra steps to appear.⁠Source 20, Source 24

    Workday Agent System of Record

    ASOR manages Workday-built, partner-built, and self-built agents; external ones are registered only through its API; some, like HiredScore and Evisort agents, aren’t in it.⁠Source 2, Source 21

  2. Where agent identity and access live

    Microsoft Agent 365

    Agent identities are Microsoft Entra service principals, managed with Conditional Access, permission grants, and consent; each needs a business sponsor.⁠Source 4

    Workday Agent System of Record

    Each agent has a unique Workday identity under Workday security policies and groups; acting for a user, it gets only what both may do.⁠Source 6, Source 7

  3. Watching what agents do

    Microsoft Agent 365

    Agent 365 collects activity from supported agents for Defender, Purview, and the admin center; custom and third-party agents must integrate to send it.⁠Source 11, Source 15

    Workday Agent System of Record

    ASOR’s audit trail report covers agent transactions; its per-agent analytics reports are only available for Workday-built agents.⁠Source 2, Source 12

    Microsoft announced an Agent 365 connector to Microsoft Sentinel, in public preview.⁠Source 25 ASOR export to any SIEM, and Agent 365 export to non-Microsoft SIEMs, are not publicly documented.

For security teams

What a security review asks, answered from each vendor’s public documentation.

TopicMicrosoft Agent 365Workday Agent System of Record
Network exposureNotifications (preview) need an endpoint Agent 365 sends to.⁠Source 26 Agent 365’s private networking is not publicly documented.Third-party agents reach Workday APIs through Agent Gateway, a single regional endpoint.⁠Source 18 Inbound endpoint needs: not publicly documented.
IdentityAgent identities are Microsoft Entra service principals, managed with Conditional Access and consent; the inventory also lists agents without one.⁠Source 4, Source 20Unique identity per agent.⁠Source 6 External agents use OAuth 2.0 or signed JWTs; tokens for third-party (self-built) agents last 4 hours.⁠Source 2, Source 6, Source 27
Access changes and revocationBlock agents organization-wide (Copilot Chat only for SharePoint and Foundry agents), or disable an Entra blueprint’s agents in one operation.⁠Source 4, Source 9Deactivating an agent hides it from users; the change may take up to a minute to reach Agent Gateway.⁠Source 2, Source 18
Audit trailSupported agents’ activity shows in Defender, Purview, and the admin center; Purview’s agent audit logs need E7 or Agent 365.⁠Source 1, Source 11, Source 15An audit trail report covers agent transactions; delegated actions record both the agent and the user.⁠Source 6, Source 12
ComplianceNot yet a Core Online Service; runs on SOC- and ISO-audited services.⁠Source 11 Microsoft announced FedRAMP High authorization is pending.⁠Source 1Workday says its SOC 2 report covers Workday Enterprise Products; ASOR isn’t named.⁠Source 28 ISO 42001 covers Workday Platform.⁠Source 28

Full comparison

18 criteria in five groups. Every cell links to its source, or says no public source answers it.

Microsoft Agent 365 and Workday Agent System of Record compared on 18 criteria
Microsoft Agent 365Workday Agent System of Record
What it is
What it is and who it’s forMicrosoft 365 service that provides a centralized control plane to discover, manage, govern, and secure AI agents, for IT and security leaders.⁠Source 1, Source 24Set up in each Workday tenant to find, register, configure, monitor, and manage AI agents built by Workday, partners, or the customer.⁠Source 2, Source 3
MaturityGenerally available since 1 May 2026 for the Commercial segment.⁠Source 19 Registry sync and multi-tenant management are in preview.⁠Source 29, Source 30Announced in February 2025; generally available since February 2026.⁠Source 23, Source 31 Agent Gateway was announced in June 2025.⁠Source 32
Control
Agent registry and discoveryAgent registry in the Microsoft 365 admin center: one inventory of Microsoft and non-Microsoft agents, including agents without an Entra agent identity.⁠Source 8, Source 20The Agent Management Hub lists Workday-built, partner-built, and self-built agents with status.⁠Source 2 Some, such as HiredScore and Evisort agents, aren’t in ASOR.⁠Source 2
Identity and access controlAgent identities live in Microsoft Entra Agent ID, managed with Conditional Access, permission grants, and consent.⁠Source 4 The inventory also lists agents without one.⁠Source 20Each agent has a unique Workday identity, governed by security policies and groups.⁠Source 6, Source 7 Acting for a user, an agent gets only what both may do.⁠Source 6
Ownership, policy, and revocationA required sponsor per Entra agent identity, 30-day soft delete, and owner reassignment for shared Agent Builder and Copilot Studio agents.⁠Source 4, Source 9Admins set each agent’s skills and who can use it, and activate or deactivate it.⁠Source 2, Source 10 A deactivated agent is hidden from users and can be reactivated.⁠Source 2
Audit log and observabilitySupported agents’ activity shows in Defender, Purview, and the admin center.⁠Source 11, Source 15 Agent 365 keeps it 30 days; Purview’s agent audit logs need E7 or Agent 365.⁠Source 1, Source 11An audit trail report covers agent transactions; delegated actions record the agent and the user.⁠Source 6, Source 12 Per-agent analytics reports cover Workday-built agents only.⁠Source 2
Connection
How agents connectThe SDK works with agents on Azure, AWS, Google Cloud, or on premises.⁠Source 15 Agent 365’s private networking is not publicly documented.Third-party agents must route Workday API traffic through Agent Gateway, a single regional endpoint.⁠Source 18 Outbound-only use is not publicly documented.
Agents across organizationsA published agent can join a customer tenant via a multitenant blueprint.⁠Source 4 Microsoft’s separate Foundry and standard-harness Copilot Studio speak A2A.⁠Source 33, Source 34ASOR manages partner-built agents, which Workday calls second-party agents; a definition can carry an ID locating each one in the partner’s system.⁠Source 2, Source 35
Protocol supportTenant-wide tool control; your own MCP servers in preview.⁠Source 1, Source 17 Microsoft documents A2A for its separate Foundry and standard-harness Copilot Studio, not Agent 365.⁠Source 33, Source 34API registration is based on the A2A Agent Card.⁠Source 35 Outside assistants can call the Self-Service Agent over A2A, and tool search can filter by SOAP, REST, or MCP.⁠Source 36, Source 37
Frameworks, models, and clouds supportedMicrosoft and third-party agents.⁠Source 1 SDK docs name frameworks such as LangChain, CrewAI, and the OpenAI Agents SDK, and agents keep their own host.⁠Source 16, Source 29Registration records each agent’s platform, or OTHER.⁠Source 35 Workday names Google Gemini Enterprise as an outside assistant able to call its Self-Service Agent.⁠Source 36
Operations
Deployment options and data residencyHonors the EU Data Boundary; its observability service stores customer content in the tenant’s default geography.⁠Source 11 Self-hosting it is not publicly documented.Set up in each Workday tenant.⁠Source 3 Agent Gateway endpoints: US, EU, UK, Canada, Australia, Singapore, India, Japan.⁠Source 18 Self-hosting: not publicly documented.
Compliance attestationsNot yet a Core Online Service; runs on SOC- and ISO-audited services.⁠Source 11 Microsoft announced FedRAMP High authorization is pending.⁠Source 1Workday says its SOC 2 report covers Workday Enterprise Products.⁠Source 28 Its ISO 42001 certificate covers named products including Workday Platform; ASOR isn’t named.⁠Source 28
Support and SLANo specific SLA for the Frontier preview program.⁠Source 38 An SLA or support plan specific to the generally available service is not publicly documented.Workday says its company-wide support is 24/5, with severity 1 cases 24/7/365, or 24/7/365 with Success Plans.⁠Source 39 An ASOR uptime SLA is not publicly documented.
Time and effort to get runningEnterprise customers need Microsoft 365 E5, or E3 with Defender Suite and Purview Suite, and at least one user with an Agent 365 license.⁠Source 5, Source 19Enable the ASOR functional area and set its security policies.⁠Source 3 Registering an external agent includes finding the IDs of the Workday APIs it will use.⁠Source 21
Pricing model and public pricesPer user: lists at $15 per user per month standalone, or in Microsoft 365 E7.⁠Source 5 Microsoft Cloud subscribers get foundational capabilities at no extra cost.⁠Source 5No additional specific SKU for ASOR.⁠Source 2 Workday-built agents consume Flex Credits by skill.⁠Source 22 A credit’s price is not publicly documented.
Building
Agent building toolsMicrosoft says the Agent 365 SDK isn’t an agent-building framework.⁠Source 15 For low-code building, the docs point to Microsoft’s separate Copilot Studio.⁠Source 40You provide an external agent’s definition through an API.⁠Source 2 Workday announced the low-code Flowise Agent Builder for Workday’s separate Workday Build in 2025.⁠Source 41
Model accessMicrosoft says the SDK doesn’t call or select models; the agent keeps making its own model calls.⁠Source 15, Source 16Workday’s AI agents use large language models.⁠Source 2 Which models ASOR supports or includes is not publicly documented.
Integrations and ecosystemLaunched with preintegrated partner agents and agents built on partner agent factories.⁠Source 42, Source 43 Work IQ MCP tools for Mail, Calendar, Teams, and more are in preview.⁠Source 44In February 2026, Workday said more than 65 partners were connecting agents to ASOR.⁠Source 23 Workday says partner agents reached its Marketplace in June 2025.⁠Source 32

Which to choose

Choose Microsoft Agent 365 if

  • You use Microsoft’s separate Copilot Studio or Microsoft Foundry, which Microsoft says can provide built-in Agent 365 integration for some scenarios.⁠Source 29, Source 45
  • You want agent identities in Entra, managed with the same Conditional Access, consent, and lifecycle controls as the rest of your tenant.⁠Source 4
  • You want one inventory of Microsoft and non-Microsoft agents, whether they run on Azure, AWS, Google Cloud, or on premises.⁠Source 15, Source 20
  • You want named accountability: each Entra agent identity needs a sponsor, and admins can block or delete agents without owners.⁠Source 4, Source 8

Choose Workday Agent System of Record if

  • Your agents mostly work in Workday, and each should have its own Workday identity under your existing security policies and groups.⁠Source 2, Source 6, Source 7
  • You want an agent acting for a user limited to what both may do, with audit entries naming both.⁠Source 6
  • You want Workday-built, partner-built, and self-built agents listed with their status in one Agent Management Hub.⁠Source 2
  • You already run Workday and want agent governance in the same tenant, with no additional specific SKU to buy for ASOR.⁠Source 2, Source 3

Questions buyers ask

Does either one build or host agents?

Microsoft says the Agent 365 SDK doesn’t build, host, deploy, orchestrate, or execute the agent; for low-code building, Microsoft points to its separate Copilot Studio.⁠Source 16, Source 40 ASOR takes an external agent’s definition through an API; Workday announced a low-code agent builder for Workday’s separate Workday Build.⁠Source 2, Source 41

How is each one priced?

Agent 365 lists at $15 per user per month standalone or in Microsoft 365 E7; Microsoft Cloud subscribers get foundational capabilities at no extra cost.⁠Source 5 ASOR needs no additional specific SKU.⁠Source 2 Workday-built agents consume Flex Credits by skill.⁠Source 22 A credit’s price is not publicly documented.

Do they support MCP and A2A?

Agent 365 can control tool access, including Microsoft MCP servers.⁠Source 1 Microsoft documents A2A for its separate Foundry and standard-harness Copilot Studio agents.⁠Source 33, Source 34 ASOR bases external agent registration on the A2A Agent Card and its tool search covers MCP tools; Workday’s Self-Service Agent takes A2A calls.⁠Source 35, Source 36, Source 37

Can either one manage agents from other companies?

Ecosystem partner agents can be deployed and managed from the admin center; multi-tenant management, in preview, governs agents across tenants you administer.⁠Source 30, Source 42 ASOR manages partner-built agents, which Workday calls second-party agents.⁠Source 2 Controls held by the partner company are not publicly documented for either.

How we compare

Read the full method

Every claim on this page links to a public source. Where none answers a question, the page says so.

We re-check every fact at least every 90 days. This page was last checked .

Something wrong or out of date? Tell us and we’ll correct it.

Sources

50 public sources, each with the date we checked it. Every one opens in a new tab.

  1. Source 1: Microsoft Agent 365 - Service Descriptions | Microsoft Learn Microsoft · checked Back:abcdefghijklm

  2. Source 2: About Workday Agents (Workday Administrator Guide) Workday · checked Back:abcdefghijklmnopqrstuvwxyz2728

  3. Source 3: Set Up Agent System of Record (Workday Administrator Guide) Workday · checked Back:abcdefgh

  4. Source 4: Agent 365 identity | Microsoft Learn Microsoft · checked Back:abcdefghijklm

  5. Source 5: Licensing Documents Microsoft · checked Back:abcdefgh

  6. Source 6: Concept: Agent Security (Workday Administrator Guide) Workday · checked Back:abcdefghijklm

  7. Source 7: Setup Considerations: Agent Security (Workday Administrator Guide) Workday · checked Back:abcdef

  8. Source 8: Agent Registry in Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn Microsoft · checked Back:abcd

  9. Source 9: Governance and Lifecycle actions for agents available in Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn Microsoft · checked Back:abc

  10. Source 10: Workday Agent System of Record | Workday US Workday · checked Back:ab

  11. Source 11: Data handling, data residency, and compliance in Agent 365 observability | Microsoft Learn Microsoft · checked Back:abcdefgh

  12. Source 12: FAQ: Agent Security (Workday Administrator Guide) Workday · checked Back:abcd

  13. Source 13: Agent management roles and permissions in Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn Microsoft · checked Back to text

  14. Source 14: Workday and Microsoft to Deliver Unified AI Agent Experience for the Enterprise Workday · checked Back:ab

  15. Source 15: Agent 365 SDK frequently asked questions | Microsoft Learn Microsoft · checked Back:abcdefgh

  16. Source 16: Microsoft Agent 365 SDK overview | Microsoft Learn Microsoft · checked Back:abcde

  17. Source 17: Bring your own (BYO) MCP server in Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn Microsoft · checked Back:ab

  18. Source 18: Concept: Workday Agent Gateway (Workday Administrator Guide) Workday · checked Back:abcde

  19. Source 19: Microsoft Agent 365 overview | Microsoft Learn Microsoft · checked Back:abcd

  20. Source 20: Agent Registry convergence with Microsoft Agent 365 | Microsoft Learn Microsoft · checked Back:abcdefg

  21. Source 21: Register External Agents (Workday Administrator Guide) Workday · checked Back:abc

  22. Source 22: Workday Flex Credits | Workday US Workday · checked Back:abc

  23. Source 23: The Workday Agent System of Record Is Now Generally Available Workday · checked Back:abcd

  24. Source 24: Microsoft Agent 365: The Control Plane for Agents Microsoft · checked Back:ab

  25. Source 25: Agent 365 connector: Monitor, hunt, and investigate AI agent activity in Microsoft Sentinel | Microsoft Community Hub Microsoft · checked Back to text

  26. Source 26: Agent Messaging Endpoint | Microsoft Learn Microsoft · checked Back to text

  27. Source 27: Concept: External Agent ASU Considerations (Workday Administrator Guide) Workday · checked Back to text

  28. Source 28: Workday Compliance | Workday US Workday · checked Back:abcd

  29. Source 29: Choose an Agent 365 Integration Option | Microsoft Learn Microsoft · checked Back:abcd

  30. Source 30: Manage agents across multiple tenants in the Microsoft 365 admin center - Microsoft 365 admin | Microsoft Learn Microsoft · checked Back:ab

  31. Source 31: The Next Generation of Workforce Management is Here - Workday Unveils New Agent System of Record Workday · checked Back to text

  32. Source 32: Workday Announces New AI Agent Partner Network and Agent Gateway Workday · checked Back:ab

  33. Source 33: Connect to an agent over the Agent2Agent (A2A) protocol - Microsoft Copilot Studio | Microsoft Learn Microsoft · checked Back:abc

  34. Source 34: Connect to an A2A agent endpoint from Foundry Agent Service - Microsoft Foundry | Microsoft Learn Microsoft · checked Back:abc

  35. Source 35: ASOR API Documentation v1.2 (Workday/asor on GitHub) Workday · checked Back:abcd

  36. Source 36: Connect External Agents to Workday Using A2A (Workday Administrator Guide) Workday · checked Back:abc

  37. Source 37: Concept: ASOR Agent Resource Search API (Workday Administrator Guide) Workday · checked Back:ab

  38. Source 38: Preview Agent 365 features through the Frontier program | Microsoft Learn Microsoft · checked Back to text

  39. Source 39: Workday Support | Workday US Workday · checked Back to text

  40. Source 40: Get started with Microsoft Agent 365 | Microsoft Learn Microsoft · checked Back:ab

  41. Source 41: Workday Unveils Workday Build, Giving Developers the Tools to Build the Future of Work Workday · checked Back:ab

  42. Source 42: Ecosystem partner agents available in Agent 365 | Microsoft Learn Microsoft · checked Back:ab

  43. Source 43: Microsoft Agent 365, now generally available, expands capabilities and integrations | Microsoft Security Blog Microsoft · checked Back to text

  44. Source 44: Connect existing agents to Microsoft Agent 365 | Microsoft Learn Microsoft · checked Back to text

  45. Source 45: What is Microsoft Foundry? - Microsoft Foundry | Microsoft Learn Microsoft · checked Back:abc

  46. Source 46: Your company's private network Blocks.ai · checked Back to text

  47. Source 47: Network requirements Blocks.ai · checked Back to text

  48. Source 48: Solutions: Agent sprawl Blocks.ai · checked Back to text

  49. Source 49: Solutions: Partner networks Blocks.ai · checked Back to text

  50. Source 50: Pricing Blocks.ai · checked Back to text