Sshubhu1953inshubhankarsarkar.hashnode.dev·3d ago · 15 min readArchitecture and DesignSolution Architecture · Enterprise Architecture (TOGAF 10) · Target-State & Transition Architecture · Microservices · Event-Driven Architecture · Domain-Driven Design · API-Led Integration · Strangler00
Sshubhu1953inshubhankarsarkar.hashnode.dev·3d ago · 17 min readOnboarding a Partner to Your API: A Step-by-Step Entra RunbookPart 6 of 6 in the Entra ID Authentication: A Field Guide series. Every article on this topic explains the pieces. Very few say what order to do them in, or what you actually put in the email to the p00
Sshubhu1953inshubhankarsarkar.hashnode.dev·3d ago · 5 min readValidating Entra Tokens in Azure API ManagementPart 5 of 6 in the Entra ID Authentication: A Field Guide series. A partner sends you a token. It is signed correctly, the audience is right, it has not expired — and API Management returns 401 with n00
Sshubhu1953inshubhankarsarkar.hashnode.dev·3d ago · 9 min readSecretless Azure: Managed Identities and Workload Identity FederationPart 4 of 6 in the Entra ID Authentication: A Field Guide series. "We keep the client secret in Key Vault" is a very common answer to a question it does not actually address. Reading Key Vault needs a00
Sshubhu1953inshubhankarsarkar.hashnode.dev·3d ago · 6 min readOAuth 2.0 Grant Types in Azure: Which to Use, and Which Are DeadPart 3 of 6 in the Entra ID Authentication: A Field Guide series. Five OAuth flows matter in Azure and two are actively harmful. Which ones you reach for says a lot about whether you learned OAuth in 00
