About

I’m an identity architect working mostly in Microsoft Entra. This site is where I write up the designs, trade-offs and gotchas I run into: Conditional Access, privileged access, lifecycle automation and identity governance.

Everything here is my own opinion, written from hands-on work, and not the position of my employer or any client.

If something here is wrong or out of date, tell me and I’ll fix it.