darrenjrobinson – Bespoke Identity and Access Management Solutions
Enterprise Microsoft and SailPoint Identity & Access Management Architect
It’s not going to be a surprise that I’ve been working with Decentralized Identity over the last couple of years. A common thing I find myself doing is checking/debugging DID documents. Like many others I started with tools like the ION Network Explorer for the ION network and pasting in DID Web URLs into a browser.… keep reading
I’ve just published v1.1.6 of the SailPoint IdentityNow PowerShell Module to both GitHub and the PowerShell Gallery. Release 1.1.6 of the SailPoint IdentityNow PowerShell Module is the result of updates by Sean McGovern, Yannick Beot, David Minnelli and myself.… keep reading
Updated 8 Jan 2025: Module updated to v 1.0.2 and resigned. Links: GitHub, PowerShell Gallery
In this post I detail a module I’ve just published that is another of those I’ve done this before, but how do I find it again moments.… keep reading
Approximately five years ago I rolled through a number of Identity and Access lifecycle management projects that used SAP SuccessFactors as the source of authority for user data. It isn’t uncommon to use a HRM solution to source identity data, but it is never a one way street.… keep reading
Today I was keen to try out some new ideas I wanted to explore in a Jupyter Notebook. I hadn’t used that environment for about six months so thought I’d grab the latest version of dotnet interactive before I started. Looking back at a previous post on updating dotnet interactive I jumped straight to dotnet tool search dotnet-interactive to find the latest version.… keep reading
This blog uses WordPress. Why WordPress? Well, it was the most prevalent platform when I started this blog back in 2016 and it was more powerful and extensible than Blogger which I had used previously. Anyway, that’s rather irrelevant for this post which about accessing WordPress APIs with PowerShell.… keep reading
I’ve authored numerous posts on using the Microsoft Authentication Libraries to connect to Microsoft Graph using PowerShell and Python. They cover using both public and confidential client methods. But what about a method that can be either? In this post I show how to use the Authorization Code with PKCE Flow and PowerShell to authenticate and authorize against Azure Active Directory for Microsoft Graph access.… keep reading
Proof Key for Code Exchange (PKCE) is a mechanism often used with an OAuth2 Authorization Code Grant flow to provide an enhanced level of security when authenticating to an Identity Provider such as Microsoft Graph to get an access token. In order to use PKCE a code_verifier is generated along with a code_challenge.… keep reading
Registering Microsoft Graph applications using the Azure Portal and assigning API Permissions is trivial. When you are automating that process though rather than choosing API permissions using the Azure Portal Application Registration UI, you need to know the Microsoft Graph Permission Scope IDs.… keep reading
I’m curious. I often think, how does that work? Or why does it behave like that? We are well into the journey towards Passwordless adoption and I’ve spoken and posted about aspects of it before. Always a good place to start are the standards.… keep reading