Architecture and DesignSolution Architecture · Enterprise Architecture (TOGAF 10) · Target-State & Transition Architecture · Microservices · Event-Driven Architecture · Domain-Driven Design · API-Led Integration · StranglerSep 12 · 15 min readshubhankarsarkar.hashnode.dev
Onboarding a Partner to Your API: A Step-by-Step Entra RunbookPart 6 of 6 in the Entra ID Authentication: A Field Guide series. Every article on this topic explains the pieces. Very few say what order to do them in, or what you actually put in the email to the pSep 12 · 17 min readshubhankarsarkar.hashnode.dev
Validating Entra Tokens in Azure API ManagementPart 5 of 6 in the Entra ID Authentication: A Field Guide series. A partner sends you a token. It is signed correctly, the audience is right, it has not expired — and API Management returns 401 with nSep 12 · 5 min readshubhankarsarkar.hashnode.dev
Secretless Azure: Managed Identities and Workload Identity FederationPart 4 of 6 in the Entra ID Authentication: A Field Guide series. "We keep the client secret in Key Vault" is a very common answer to a question it does not actually address. Reading Key Vault needs aSep 12 · 9 min readshubhankarsarkar.hashnode.dev
OAuth 2.0 Grant Types in Azure: Which to Use, and Which Are DeadPart 3 of 6 in the Entra ID Authentication: A Field Guide series. Five OAuth flows matter in Azure and two are actively harmful. Which ones you reach for says a lot about whether you learned OAuth in Sep 12 · 6 min readshubhankarsarkar.hashnode.dev
