I enjoy mountain biking (MTB) and spending time in the sauna, but since this is GitHub, let's focus on tech! ;)

Prediction is very difficult, especially about the future. — Niels Bohr

• Workshop: Entra as Code
• Terraform Entra Verified ID Provider

• VC for Europeans
• eIDAS test site
• Decentralized Identifiers (DIDs) as an Identifier Metasystem
• Awesome Self-Sovereign Identity
• https://github.com/decentralized-identity/didcomm-messaging
• https://demo.didcomm.org/ 🔼
• CH https://github.com/e-id-admin/eidch-android-wallet
• EU https://github.com/orgs/eu-digital-identity-wallet/repositories
• KeyCloack https://keycloak-day.dev/assets/files/Norimatsu_KeycloakDevDay2025_Darmstadt.pdf
• https://www.verifiedorchestration.com/
• Specification of Strong Customer Authentication (SCA) Implementation with the Wallet
• to check: https://www.ethentic.eu/

• https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html
• https://openid.net/specs/openid-4-verifiable-presentations-1_0.html
• https://openid.net/specs/openid4vc-high-assurance-interoperability-profile-1_0-final.html

• https://github.com/pic-protocol/pic-spec/blob/main/draft/0.1/pic-spec.md

• https://android-developers.googleblog.com/2025/04/announcing-android-support-of-digital-credentials.html
• https://developer.android.com/identity/digital-credentials/credential-verifier
• https://developer.android.com/identity/digital-credentials/phone-number-verification

• https://developer.apple.com/documentation/BundleResources/Entitlements/com.apple.developer.identity-document-services.document-provider.mobile-document-types

• Takahiko Kawasaki/VC Deep Dive/Issuing verifiable credentials in the SD-JWT VC and mdoc/mDL formats, mandated in eIDAS 2.0
• How VC Issuance works

• DID Resolver: https://dev.uniresolver.io/

• https://github.com/Azure/Enterprise-Scale
• https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/ with a nice Visio drawing
• 🔨 (Almost) Every infrastructure decision I endorse or regret after 4 years running infrastructure at a startup

• https://github.com/Azure/ALZ-Bicep/wiki/Accelerator
• GitHub - ACA-Landing-Zone-Accelerator
• Prepare your Azure Cloud Environment with the Cloud Adoption Framework
• Serverless Chats: Streaming Data at Scale Using Serverless with Anahit Pogosova Part 1
• Serverless Chats: Streaming Data at Scale Using Serverless with Anahit Pogosova Part 2

• Architecture Styles Worksheet: https://www.developertoarchitect.com/downloads/architecture-styles-worksheet.pdf
• https://jacquiread.com/posts/software-design/
• Functional Programming on .net - The Best of Both Worlds - Isaac Abraham - NDC Oslo 2024: https://www.youtube.com/watch?v=V9GYPOsPj4M
• Let's build the worst Event Sourcing system! - Oskar Dudycz - NDC London 2024: https://www.youtube.com/watch?v=20zvAJAhqS0

• By example: GitHub and Video
• Distributed systems real-life example: https://www.enterpriseintegrationpatterns.com/ramblings/18_starbucks.html
• 📖The Software Architect Elevator
• 📖Designing Data-Intensive Applications
• 🔨 PL Async Internals in .NET
• Advanced API and Integration Problems & Patterns - Udi Dahan - NDC Oslo 2022
• 📖Database Internals
• 💥Learn Advanced Distributed Systems Design

• Claude Code (99.99% times via CLI)
• GitHub Copilot (95% times via CLI)
• Google Antigravity (Google Gemini) 100% via IDE

• https://www.anthropic.com/engineering/equipping-agents-for-the-real-world-with-agent-skills
• https://github.com/anthropics/claude-cookbooks
• https://github.com/anthropics/skills
• https://github.com/brennercruvinel/CCPlugins
• https://github.com/fcakyon/claude-settings
• https://github.com/affaan-m/everything-claude-code

• still nice to make a website https://bolt.new
• to check: https://paperclip.ing/
• https://github.com/AlexsJones/llmfit

• https://blog.christianposta.com/api-keys-are-a-bad-idea-for-enterprise-llm-agent-and-mcp-access/

• https://techcommunity.microsoft.com/blog/azure-ai-services-blog/graphrag-end-to-end-poc/4361080
• https://learn.microsoft.com/azure/cosmos-db/gen-ai/quickstart-rag-chatbot

• Microsoft Learn MCP Server https://github.com/MicrosoftDocs/mcp
• Lokka - MS Entra Graph API MCP: https://lokka.dev/docs/install
• Atlas MCP server that provides access to Microsoft Graph API using Entra ID authentication with On-Behalf-Of (OBO) flow: https://github.com/JasSuri/atlas
• https://github.com/rinadelph/Agent-MCP
• https://techcommunity.microsoft.com/blog/azure-ai-foundry-blog/deployment-guide-copilot-studio-agent-with-mcp-server-exposed-by-api-management-/4462432

• OCTA: OAuth 2.0 and OpenID Connect (in plain English)
• https://www.nango.dev/blog/why-is-oauth-still-hard
• https://developer.okta.com/blog/2019/10/21/illustrated-guide-to-oauth-and-oidc
• https://auth0.com/docs/authorization
• awesome-iam
• OAuth – the good Parts - Dominick Baier - NDC Oslo 2021 https://www.youtube.com/watch?v=y2Psj8ACZyw
• Test FIDO2/Passkeys https://www.token2.swiss/tools/fido2-demo
• 🔒 Demystifying cookies and tokens
• 🔒 AWS Cognito Sample https://medium.com/@samudurand/protecting-lambda-urls-with-cognito-iam-lambda-edge-and-cdk-4ac79f9e779c
• 🔒 FGA solution https://docs.permit.io/modeling/mesa-verde/ & DEMO https://github.com/permitio/mesa-verde-banking-demo
• Cedar video & into token Cedar policy with an access token
• https://www.linkedin.com/pulse/implementing-mcp-dynamic-client-registration-spiffe-keycloak-posta-ccryf
• Annotated Version of NIST Special Publication (SP) 800-63-4,Digital Identity Guidelines: https://www.tcannex.com/p/annotated-nist-sp-800-63-4
• CIAM MS Overview: https://www.microsoft.com/en-us/security/business/security-101/what-is-ciam
• DPoP https://auth0.com/docs/secure/sender-constraining/demonstrating-proof-of-possession-dpop & https://auth0.com/blog/protect-your-access-tokens-with-dpop/
• Entra Primary Refresh Token https://learn.microsoft.com/en-us/entra/identity/devices/concept-primary-refresh-token?tabs=windows-prt-issued%2Cwindows-prt-used%2Cwindows-prt-renewal%2Cwindows-prt-protection%2Cwindows-apptokens%2Cwindows-browsercookies%2Cwindows-mfa
• https://brave.com/blog/zklogin/

• https://github.com/discord/access
• https://github.com/jhaals/yopass
• https://github.com/JanssenProject/jans
• https://github.com/jelhub/scimgateway

• Journey to Azure AD PRT- Primary Refresh Token
• Newsletter: https://entra.news
• https://github.com/merill/awesome-entra
• big picture diagram https://github.com/msandbu/azuread
• Entra ID as a code: https://www.terraprovider.com/
• https://identity-man.eu/2020/11/23/an-introduction-to-azure-ad-identity-governance/
• Workload Identity Protection
• Governance
• Managed ID
• App Registrations, Enterprise Apps and Service Principals
• PIM
• 🔒 https://learn.microsoft.com/en-us/entra/architecture/external-identity-deployment-architectures
• 🔒 https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-kerberos-sso
• https://heusser.pro/p/understanding-entra-id-app-registrations-enterprise-applications-and-service-principals-part-2-os8rb48knqez/
• https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/
• https://learn.microsoft.com/en-us/entra/identity/users/convert-external-users-internal

https://jaydoubleu.dev/guides/mcp-azure-oauth2-obo

• https://derkvanderwoude.medium.com/agent-identity-security-demystified-2ecb164239bf
• https://github.com/davidalonsod/Dalonso-Security-Repo/tree/main/Workbooks

• https://learn.microsoft.com/en-us/entra/fundamentals/whats-new-ignite-2025#microsoft-entra-external-id
• https://learn.microsoft.com/en-us/entra/identity/hybrid/user-source-of-authority-overview
• https://learn.microsoft.com/en-us/entra/identity/authentication/synced-passkey-faq
• feature plan & list (not official): https://deltapulse.app/dashboard
• https://tech.nicolonsky.ch/AiTM-Phishing-with-Azure-Functions/

• https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
• https://learn.microsoft.com/en-us/entra/id-governance/licensing-fundamentals#features-by-license

• https://www.christianfrohn.dk/2025/01/15/monitoring-access-package-delivery-status-in-entra-id-governance/
• https://janbakker.tech/dynamic-approval-in-entra-id-access-packages-using-custom-extensions/
• review permissions https://m365scripts.com/microsoft365/manage-entra-id-delegated-permissions-for-specific-users-using-microsoft-graph/

• https://learn.microsoft.com/en-us/entra/identity/conditional-access/service-dependencies
• https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-cloud-apps?tabs=powershell#office-365

• https://device-insight.com/en/developers-blog/use-azure-ad-workload-identity-for-pod-assigned-managed-identity-in-aks/
• https://johnlokerse.dev/2024/05/05/setup-azure-devops-workload-identity-federation-using-azure-bicep/

• https://github.com/Cloud-Architekt/AzureAD-Attack-Defense

• https://github.com/reprise99/Sentinel-Queries

• https://learn.microsoft.com/en-us/security/operations/incident-response-playbooks

• https://learn.microsoft.com/en-us/entra/architecture/security-operations-introduction

• https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-token-protection

• https://cloudbrothers.info/en/conditional-access-bypasses/

• https://github.com/guardzcom/security-research-labs/tree/main/AI-Cloud-Tools/M365-Tools/EntraReaper

• https://www.systanddeploy.com/2025/10/dashboard-of-windows-authentication.html
• https://learnsentinel.blog/2022/06/21/kql-lessons-learnt-from-365daysofkql/
• https://github.com/davidalonsod/Dalonso-Security-Repo

• https://www.powershellgallery.com/packages/PSPreworkout

• https://github.com/microsoft/EntraExporter
• https://github.com/microsoft/Microsoft365DSC
• https://github.com/kayasax/SCIMTool
• https://github.com/ThomasKur/M365Documentation

• https://permissions.factorlabs.pl/
• https://entrascopes.com/
• https://github.com/merill/microsoft-info

• https://github.com/mjendza/workshop-entra-as-code-interactive
• https://blog.kewalaka.nz/post/2025/11/avm-pim-group-module/
• https://mattias.engineer/blog/2026/terraform-github-1/

• https://swjm.blog/the-complete-guide-to-rdp-with-yubikeys-fido2-cba-1bfc50f39b43

• ASP.NET Web App - Confidential Client: https://github.com/Azure-Samples/active-directory-aspnetcore-webapp-openidconnect-v2
• https://github.com/Azure-Samples/active-directory-dotnetcore-daemon-v2
• JavaScript Public Client: https://github.com/Azure-Samples/ms-identity-docs-code-javascript
• For External ID sample: https://github.com/Azure-Samples/ms-identity-ciam-javascript-tutorial
• Graph Explorer (with tenant-id param): https://developer.microsoft.com/en-us/graph/graph-explorer?tenant={{tenant-id-here}}

• https://gist.github.com/rbrayb/847be01d7f2c532d66cf07ad84d6466d
• OpenID Connect details: https://learn.microsoft.com/en-us/azure/active-directory-b2c/openid-connect

• https://learn.microsoft.com/en-us/entra/external-id/external-identities-overview#comparing-external-id-feature-sets
• https://learn.microsoft.com/en-us/entra/external-id/customers/concept-supported-features-customers

• Refresh Token: AzureAD/microsoft-authentication-library-for-js#5137
• https://learn.microsoft.com/en-us/entra/msal/dotnet/acquiring-tokens/desktop-mobile/linux-dotnet-sdk-wsl

• Deep Dive into Entra: Exclusive Outage Stories & Architectural Innovations: https://www.youtube.com/watch?v=PtEQYnRu6eo
• Actor tokens security issue: https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
• ACS: https://learn.microsoft.com/en-us/previous-versions/azure/active-directory/azuread-dev/active-directory-acs-migration

• https://auth0.com/
• https://stytch.com/
• https://www.descope.com/
• https://clerk.com

• https://goauthentik.io/
• https://www.keycloak.org/

• https://github.com/mivano/azure-cost-cli
• https://azurealan.ie/2025/11/08/using-traffic-manager-to-failover-or-bypass-azure-front-door/

• Kleopatra - manage Yubikey certificates, etc https://apps.kde.org/kleopatra/
• faking data and getting notification someone is accessing (credit card, AWS credentials) https://canarytokens.org/generate
• generate tokens: https://token.dev/
• review & analyze tokens: https://jwt.ms & https://jwt.io
• https://github.com/codesenberg/bombardier

• https://github.com/ozdemirburak/morse-code-translator

• https://oidcdebugger.com/debug
• https://chrome.google.com/webstore/detail/saml-devtools-extension/jndllhgbinhiiddokbeoeepbppdnhhio

• Summary of MS samples & platforms: https://learn.microsoft.com/en-us/entra/identity-platform/sample-v2-code
• MS Samples
• MSAL - Retry policies
• MSAL Logger
• OAuth - Native Flow Authorization Code Flow Diagram
• Openid Connect Diagram - get token via confidential client
• Postman Oauth Entra ID Collection
• Default Azure Credentials
• Authentication with multiple identity providers

• Microsoft Woodgrove Groceries -> Azure AD B2C MS Demo
• Microsoft Woodgrove Groceries -> Entra External ID for Customers MS Demo

• Microsoft 365 Licensing Map
• https://azurecharts.com/

• https://blog.tyang.org/2021/12/06/monitoring-azure-policy-compliance-states-2021-edition and connected repo: https://github.com/andrewmatveychuk/azure.policy
• and from the previous link: https://blog.tyang.org/2021/12/06/monitoring-azure-policy-compliance-states-2021-edition

• https://medium.com/@omaxel/allow-access-to-azure-app-service-only-from-azure-front-door-bdfa16bc675d
• https://cloudtips.nl/securing-azure-web-apps-and-function-apps-with-azure-front-door-e4a5e4071290

• https://www.youtube.com/watch?v=IyQM_wG_X_Q & https://github.com/Azure/terraform-azurerm-caf-enterprise-scale
• https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/
• https://github.com/Azure/ALZ-Bicep/wiki/Accelerator
• https://github.com/Azure/terraform-azurerm-lz-vending

• https://medium.com/into-alm/configuration-as-code-moving-away-from-library-groups-in-azure-devops-e9ff683d150d
• https://azure.github.io/Azure-Verified-Modules/
• https://github.com/Azure/bicep-registry-modules
• https://github.com/arindam0310018/10-Oct-2023-DevOps__Workload-Identity-Federation-with-Service-Principal-Using-Terraform

• https://backstage.io & https://github.com/backstage/backstage
• https://www.websequencediagrams.com/
• 👑 https://plantuml.com/ & https://github.com/plantuml-stdlib/C4-PlantUML

• https://github.com/Finbuckle/Finbuckle.MultiTenant

• https://securityheaders.com/

• https://observatory.mozilla.org/analyze/mjendza.net

• https://blog.icewolf.ch/archive/2023/05/28/http-security-headers/

• 🔨 🔒 Secure your website with the right security headers Mozilla and SecurityHeaders

• speed test with details: https://speed.cloudflare.com/

• https://report-uri.com/

• https://redbot.org/

• https://spacelift.io/ (Terraform&OpenTofu)
• https://registry.terraform.io/modules/Azure-Terraformer/atat/github/latest

• https://registry.terraform.io/providers/hashicorp/azuread/latest
• https://terraprovider.com/

• https://damienbod.com/
• https://identity-man.eu/
• https://www.troyhunt.com/
• https://scotthelme.co.uk/
• https://event-driven.io/ and the tag Architecture: https://event-driven.io/en/category/architecture/
• https://blog.codingmilitia.com/
• https://architectelevator.com/
• https://ericonidentity.com/ https://discovery.cevolution.co.uk/ciam/

• https://entra.news
• https://newsletter.identosphere.net/

• https://ourcloudnetwork.com/
• https://www.cloud-architekt.net/
• https://cloudbrothers.info/

• Online SMS service to test OTP: https://anonymsms.com/
• Temporary Email Service (allows custom email addresses): https://www.minuteinbox.com/
• Virtual Phone Numbers: https://www.twilio.com/en-us/phone-numbers
• Postman Collection
• A verification tool to replace CAPTCHA: https://www.cloudflare.com/products/turnstile/
• https://www.iredmail.org/

• https://oidcdebugger.com/debug
• https://jwt.ms

• VS Code + B2C extension + APP insights debugger

• Temp mail (trashmail) as a service: https://github.com/HaschekSolutions/opentrashmail
• Mock Service (useful for checking request payloads 😉): https://beeceptor.com/
• Security Headers check: https://securityheaders.com/
• https://backstage.io/
• Find free replacement: https://openalternative.co
• https://pagespeed.web.dev/

• https://n8n.io
• https://kestra.io/
• https://airflow.apache.org/

• www.cloudflare.com Tunnel
• 😻 https://tailscale.com
• ngrok.com - need to pay 10$ for features
• Visual Studio IDE built-in proxy

Enable proxy for service tailscale serve --service=svc:my-name-of-service --https=3000 http://localhost:3000

• 😻 HomeAssistant: https://www.home-assistant.io/
• esphome https://esphome.io/ (ESP8266 | ESP32 | other => easy yaml config and push to HomeAssistant)
• Portainer https://www.portainer.io/ (Container Management for Docker)
• Home DNS server? Try PiHole https://pi-hole.net/
• OpenWrt as router OS https://openwrt.org/
• smart switches and other devices https://www.shelly.com/
• HAVC: Salus Controls & Panasonic AC (with https://github.com/sockless-coding/panasonic_cc integration)
• https://mqtt-explorer.com/

• https://www.base64decode.org/
• https://www.urlencoder.org/
• https://parseurlonline.com/
• https://asecuritysite.com/
• https://www.bestrandoms.com/random-address-in-us
• https://iancoleman.io/bip39/#english

• https://github.com/AlexsJones/llmfit

• https://github.com/HKUDS/nanobot

• https://graph.pm/

Sample command claude: claude mcp add --transport http name-of-server https://mcp.server.ai/mcp Sample command GitHub Copilot: ~/.copilot/mcp-config.json

"playwright": {
      "type": "local",
      "command": "npx",
      "args": ["@playwright/mcp@latest"],
      "env": {},
      "tools": ["*"]
    },

• excalidraw-mcp http https://mcp.excalidraw.com
• MicrosoftDocs-MCP http https://learn.microsoft.com/api/mcp
• Lokka (for Entra ID) (GitHub Copilot config)

  "Lokka-Microsoft-Lokal": {
    		"command": "npx",
    		"args": [
              "C:/dev/lokka/src/mcp/build/main.js"
          	],
    		"env": {
    			"CLIENT_ID":"",
    			"TENANT_ID":"",
    			"CLIENT_SECRET": ""
    		}
    	},
  
    	"Lokka-Microsoft": {
    		"command": "npx",
    		"args": [
              "-y @merill/lokka"
          	],
    		"env": {
    			"CLIENT_ID":"",
    			"TENANT_ID":"",
    			"CLIENT_SECRET": ""
    		},
    		"type": "stdio"
    	},
  

• https://osint.aadinternals.com/
• https://soctoolkit.com/

• https://comparisontabl.es/cloud-storage/

• https://omarchy.org/
• PoP OS

• https://developersvoice.com/blog/frontend/microfrontends-that-dont-hurt-aspnet-core/

• Boris Cherny (Creator of Claude Code) On What Grew His Career And Building at Anthropic
• Hacking Formula 1: Accessing Max Verstappen's passport and PII through FIA bugs
• Wat
• Email vs Capitalism, or, Why We Can't Have Nice Things - Dylan Beattie - NDC Oslo 2023
• Foxes
• Mountain Biking
• Żywot programisty - Sorry, only for Polish programmers 👷