Personal blog. This site reflects my own testing and my own opinions. It is not an official Microsoft statement and it is not official Microsoft documentation in any way. For authoritative guidance always refer to Microsoft Learn.

Field notes from building Microsoft 365 Copilot agents and running them in enterprise Azure environments. Everything here was measured in a lab tenant rather than taken from documentation. Where a claim is reasoning rather than measurement, it says so.

Articles

One skill, many Copilots

8 November 2026

An enterprise setup guide to personal, SharePoint, Brand Kit and organization skills: ownership, packaging, admin deployment, cross-app discovery and acceptance checks.

Setting up a Copilot Brand Kit from scratch

8 November 2026

An enterprise setup guide for IT, brand managers and users: delegate access, connect asset libraries, publish an official Copilot Brand Kit and verify its skills in PowerPoint.

Every AI can write an app now. Where should it run?

6 October 2026

Copilot, Claude, Codex and Lovable can all produce a working business app in minutes. The open question for a large organisation is where that app runs. A first look at Copilot Managed Runtime, built hands-on with a non-Microsoft coding agent.

Connecting Microsoft 365 Copilot, Cowork and Copilot Studio to your line-of-business data

18 September 2026

One MCP server, one gateway, three agent surfaces — and the signed-in user’s own permissions applying all the way down to the data. Measured in a live tenant, not taken from documentation.

Does OAuth survive a reverse proxy?

27 August 2026

We put a Microsoft 365 Copilot custom engine agent behind a reverse proxy and measured what survives. The tokens were never the fragile part — the HTTP plumbing was.

---

By Ondrej Stefka · LinkedIn · About this blog →