Azure AI Foundry Project

This provider targets the new Azure AI Foundry Account — an Microsoft.CognitiveServices/accounts resource of kind AIServices that hosts one or more Foundry Projects containing agents, evaluations, and model deployments.

Which Foundry is this? Polysync ships two distinct Foundry providers because Microsoft ships two SKUs that share the "AI Foundry" name. Pick the one that matches your Azure resource:

	Azure AI Foundry Project (this provider)	Azure AI Foundry (legacy)
Azure resource provider	Microsoft.CognitiveServices/accounts (kind AIServices)	Microsoft.MachineLearningServices/workspaces
Concept	Foundry Account + Project	AML Hub / Workspace
Use this for	Agents, evaluations, model deployment inference on the current-generation Foundry portal	Pipeline / Command / Sweep jobs on AML Hub workspaces
Job types	Foundry Agent Run, Foundry Evaluation Run, Foundry Model Deployment Inference	AI Foundry Pipeline Job, Command Job, Sweep Job
Required role	Azure AI User (or Cognitive Services User) on the account	Contributor on the workspace
Control-plane API	2024-10-01 (CognitiveServices)	2024-04-01 (MachineLearningServices)
Projects data plane	https://{account}.services.ai.azure.com/api/projects/{project} (api-version v1)	n/a
API Key auth supported	Yes — inference only	No
Icon	Blue hexagonal flask	Purple brain/circuit tile

If you see AuthorizationFailed on Microsoft.MachineLearningServices/workspaces/{name} while using a CognitiveServices Foundry resource, you have selected the wrong provider — switch to this one.

Required attributes

• Subscription Id — the Azure subscription containing the Foundry account.
• Resource Group Name — the resource group containing the account.
• AI Foundry Account Name — the CognitiveServices account name (e.g., polysync-foundry-dev).
• AI Foundry Project Name — the project within the account where agents and evaluations live.

Authentication methods

• Polysync Service Principal ⭐ (recommended) — no extra attributes; grant the Polysync Enterprise Application Azure AI User on the Foundry account.
• Service Principal — Tenant Id, Client Id, Client Secret. Use when you need a dedicated SPN per account. Rotate the secret regularly.
• Certificate — Tenant Id, Client Id, Certificate (base64 or path), optional Certificate Password and Thumbprint.
• API Key — the Foundry account access key (api-key header). Execution-only and limited to Model Deployment Inference. Agent and Evaluation jobs require an AAD identity.

Permissions checklist

• The chosen identity must hold Azure AI User (or Cognitive Services User) on the Foundry account for inference and projects data plane calls.
• The control-plane discovery call (Microsoft.CognitiveServices/accounts/deployments) additionally requires Reader on the resource (already covered by Contributor or Owner).

Endpoints

Plane	Base URL	Token scope
Control plane	https://management.azure.com/.../Microsoft.CognitiveServices/accounts/{account}	https://management.azure.com/.default
Projects data plane (agents, evaluations)	https://{account}.services.ai.azure.com/api/projects/{project}	https://ai.azure.com/.default
Model deployments data plane	https://{account}.services.ai.azure.com/openai/deployments/{deployment}	https://cognitiveservices.azure.com/.default

Supported jobs

Azure AI Foundry Project exposes three Polysync job types. See each dedicated page for parameter handling, output binding, execution flow, monitor URL, and troubleshooting:

• Foundry Agent Run — asynchronous; posts a user message to an existing agent and polls until the run completes.
• Foundry Evaluation Run — asynchronous; submits an evaluation against a configured dataset / evaluator set.
• Foundry Model Deployment Inference — synchronous chat completions or embeddings against a model deployment.

Troubleshooting

• 401 / 403 on Test Connection — the identity lacks Azure AI User (or Cognitive Services User) on the Foundry account, or the wrong token scope is being requested. Projects data plane requires https://ai.azure.com/.default; model deployments use https://cognitiveservices.azure.com/.default.
• AuthorizationFailed for the MachineLearningServices resource provider — you are using the wrong provider. This provider targets Microsoft.CognitiveServices/accounts. For AML Hub workspaces use Azure AI Foundry instead.
• 404 on discovery — verify Subscription Id, Resource Group Name, AI Foundry Account Name, and AI Foundry Project Name.
• API Key fails on Agent / Evaluation jobs — by design. Switch to a Service Principal method to run agents and evaluations.