Foundry IQ in Microsoft Copilot Studio is now generally available

Today, we're announcing the general availability of the Foundry IQ integration with Microsoft Copilot Studio. Users can connect a Foundry IQ knowledge base to an agent in Copilot Studio, giving the agent access to grounded enterprise knowledge and citations. Additionally, for organizations that require zero public network exposure, the GA release includes full private connectivity through Azure Private Link. 

Bring enterprise knowledge into your Copilot Studio agent

Enterprise data is spread across systems, governed by different access policies, and often available only through private networks. Connecting an agent to that data must fit the organization's identity, access, encryption, and networking requirements.

Foundry IQ provides a managed knowledge layer for agents, enabling Copilot Studio makers to connect to a single knowledge base that handles enterprise data access, retrieval, ranking, and permissions without requiring each source to be configured separately.

With the generally available integration, makers can:

• Connect to a Foundry IQ knowledge base they are authorized to access.
• Authenticate with an API key, client certificate, service principal, or Microsoft Entra ID integrated authentication.
• Use Azure Private Link and Power Platform VNet support to connect without enabling public access on the underlying Azure AI Search service.
• Work within established enterprise controls for authentication, permissions, encryption, and network isolation.
• Inspect the activity trace to confirm that Foundry IQ performed retrieval and review the items returned to the agent.

Connect through a virtual network (VNet)

Private connectivity combines two capabilities:

1. Azure Private Link for Foundry IQ, gives the service behind Foundry IQ a private IP address.
2. Power Platform VNet support routes supported Copilot Studio connection traffic through delegated subnets.

1. Configure the private endpoint

On the Azure AI Search service that backs your Foundry IQ knowledge base:

1. Open Networking and create a private endpoint for the Foundry IQ sub resource.
2. Select the virtual network and subnet that will host the endpoint.
3. Enable private DNS integration with privatelink.search.windows.net.
4. Validate private connectivity, then disable public network access.

Note: Clients continue to use https://<service-name>.search.windows.net; private DNS resolves the address to the service's private IP.

2. Enable Power Platform VNet support

1. Create dedicated subnets in the Azure regions required for your Power Platform environment and delegate them to: "Microsoft.PowerPlatform/enterprisePolicies"
2. Keep the Foundry IQ private endpoint in a separate subnet. If it is in another virtual network, configure peering or another private route. Ensure private DNS resolution and HTTPS traffic to the endpoint are allowed.
3. Create a subnet-injection enterprise policy for the delegated subnets, then assign it in the Power Platform admin center under Security > Data and privacy > Azure Virtual Network policies. Confirm that the environment's history shows a Succeeded status.

3. Connect Foundry IQ in Copilot Studio

1. Open the agent and select Build.
2. Select Tools > Foundry IQ > Create new connection.
3. Choose an authentication method and enter the standard Azure AI Search endpoint.
4. Create the connection, select a knowledge base, and add it to the agent.
5. Give the connection a clear name and description, then save the agent.

Note: Use Microsoft Entra ID authentication when it fits your organization's requirements and apply least privilege for every authentication method.

4. Validate before publishing

Ask a question that the knowledge base should answer, then verify:

• The response contains the expected grounding and citations.
• The activity trace shows a Foundry IQ retrieval step.
• Users with different permissions receive only authorized content.
• Network traffic reaches Azure AI Search through the private endpoint.
• The service isn't reachable through its public endpoint.

If the answers aren't what you expect, review the knowledge base sources, retrieval instructions, and ranking settings in Foundry IQ.

VIDEO

Get started

• Connect to Foundry IQ from an agent in Microsoft Copilot Studio (Preview)
• Learn about Foundry IQ
• Set up virtual network support for Power Platform
• Create a private endpoint for Azure AI Search
• Read the preview announcement

Foundry IQ in Copilot Studio is generally available today, giving organizations a direct way to ground agents in enterprise knowledge while retaining the security controls required for production.