Architecture Repository
Write-ups, projects, and the notes I take chasing certifications.
A working archive of how things are designed and why. Posts are one-off write-ups. Series dig into a larger topic across multiple posts.
26 posts
-
Hybrid Identity: Authentication and Synchronisation in Microsoft Entra ID
Tenth and last in this series on Microsoft Entra ID, covering the operational mechanics of hybrid identity: which authentication method actually validates a si…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Application and Workload Identities in Microsoft Entra ID
Ninth in this series on Microsoft Entra ID, covering how applications and automated workloads — as opposed to human users — get represented and secured: applic…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Conditional Access and Identity Protection in Microsoft Entra ID
Eighth in this series on Microsoft Entra ID, covering the two risk-based access control layers that sit on top of MFA: Conditional Access and Identity Protecti…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Multi-Factor Authentication in Microsoft Entra ID
Seventh in this series on Microsoft Entra ID, covering multi-factor authentication (MFA): the core mechanics, how to configure it, and a set of corrections to …
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Device Management and Inviting Guest Users in Microsoft Entra ID
Sixth in this series on Microsoft Entra ID, covering how identities get extended to two kinds of "not quite a standard internal user" scenarios: devices, and e…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Self-Service Password Reset in Microsoft Entra ID
Fifth in this series on Microsoft Entra ID, focused specifically on self-service password reset (SSPR): who it can be assigned to, how the admin experience dif…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Groups, Access Reviews, and Group-Based Licensing in Microsoft Entra ID
Fourth in this series on Microsoft Entra ID, covering groups: what the different group types are for, how access reviews keep group membership honest over time…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Creating and Administering a Microsoft Entra Tenant
Third in this series on Microsoft Entra ID, moving from concepts into the hands-on side: creating and customising a tenant, then delegating administration with…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Microsoft Entra ID: Features, Licensing Tiers, and Microsoft Entra Domain Services
Second in this series on Microsoft Entra ID. Where the previous post covered design principles and how Entra ID structurally compares to Active Directory Domai…
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure -
Designing Identity and Access Management on Azure: Microsoft Entra ID vs Active Directory
First in a series of notes on Microsoft Entra ID, Microsoft's cloud-based identity and access management (IAM) service. This post covers the design principles …
☰ Part of Microsoft Entra ID: Identity and Access Management on Azure