CLOUDY MUSINGS

As with previous posts, all source code and a corresponding GitHub repository can be found here! This is one of those questions that seems like it should have a straightforward answer, but it doesn't because what good fun would that be if there were a straightforward answer? I'm sure you've been here before: someone spots an enterprise application in Microsoft Entra ID, notices it has permissions or credentials attached, and naturally asks: who created this thing? If you star

There is a very particular flavor of frustration that only appears in identity work. I used to work in the identity and network access division at Microsoft, so my joke was I needed to move faster over the course of my career, because I've landed smack dab in identity and by proxy security most of my career. The moment I'm talking about is when Microsoft Authenticator calmly informs you that you have "too many devices registered." You know with absolute clarity that this is i

Tis the season! Customers always ask the most interesting questions about cloud capabilities. This one isn't documented well and you have to sort of piece it together by "reading the tea leaves" (my least favorite). A customer asked me a question that sounded simple enough: “Can we stand up Azure Migrate in our brownfield tenant, run dependency mapping there, and then use Azure Migrate to migrate workloads into our new greenfield tenant?” If you’ve ever led a large-scale migr

All code for this blog can be found here . I've been trailblazing with Azure since 2016. Before 2016, I set up an Entra ID (formerly...

Often times I think the idea is not to confuse, but when you sort of pile on all the different services in Azure, some of the details get...

Ok - I'm here to loudly proclaim that my entire "APIs Aren't Just for Devs" series is drawing to a close. I'm hopeful you've found these...