darrenjrobinson – Bespoke Identity and Access Management Solutions
Enterprise Microsoft and SailPoint Identity & Access Management Architect
Recently under the experimental Azure Functions build Microsoft Developer Advocates have shown enabling Azure Functions as MCP Servers. I wondered if it was possible to use this to MCP enable a number of my PowerShell Identity Tools Modules. Yes, yes it is possible.… keep reading
Last month I had the pleasure of speaking at the Sydney event for Global Azure. My session was the title of this post, AI Inception: Building AI Solutions with AI for AI. One key component of my talk was on Recursive AI.… keep reading
A foundational Dayforce PowerShell Module to query Employee data. Cmdlets to update Dayforce for business email/contact info and manage federated Single Sign On.
In my last post I detailed how to configure the Granfeldt PowerShell Management Agent as an ECMA2 connector with the Entra ID Provisioning Service. This post details a few tips for configuring and developing solutions that use ECMA2 connectors.
First though here is a table of configuration items and a comparison between the MIM Sync Service, MIM Portal & Service and Entra ID Provisioning with ECMA connectors.… keep reading
This post feels a lot like I got in a time machine and went back in time. Historically I’ve designed, built and deployed a lot of custom Forefront / Microsoft Identity Manager Management Agents. A lot of them using the Granfeldt PowerShell Management Agent thanks to is flexibility and usability.… keep reading
Last week inspired by Satya Nadella’s Microsoft Ignite Keynote I looked into the possiblity of creating an AI Agent for Entra ID. More specifically if I could create my own Entra ID AI Agent using PowerShell. The image below is what I had in mind.… keep reading
The FIDO2 specification requires each security key vendor to provide an Authenticator Attestation GUID (AAGUID) during registration. An AAGUID is a 128-bit identifier indicating the key type, such as the make and model. Passkey providers on desktop and mobile devices are also expected to provide an AAGUID during registration.… keep reading
Recently I was working with a particular application that used certificates to secure communication. I wanted to put the certificates into Azure KeyVault. Azure KeyVault naturally allows you to store certificates. However, it only lets you upload certificates that are in PFX (PKCS#12) or CER (DER or BASE64 encoded).… keep reading
Recently I’ve been assisting a client with a SCIM source that has high latency. This causes a number of issues with health validation as well as aggregation and provisioning events. The default values for health check, provisioning and aggregation were causing a myriad of errors.… keep reading
With the move to PaaS services, we often become reliant on portals for the administration interface to administer them once deployed. I recently had a request to scale down an Azure SQL Managed Instance from Business Critical to General Purpose tier.… keep reading