--- title: "shubhu1953 (@shubhu1953) | Hashnode" description: "shubhu1953 (@shubhu1953) writes on Hashnode. Read their latest articles and follow their work." url: "https://hashnode.com/@shubhu1953" --- @shubhu1953 # shubhu1953 @shubhu1953 · London, UK · Joined September 2026 ### [Architecture and Design](https://shubhankarsarkar.hashnode.dev/architecture-and-design?utm_source=hashnode&utm_medium=feed) TOGAF, DDD, target-state, strangler-fig, C4, ADRs — not a glossary, a sequence. 15 min read · [shubhankarsarkar.hashnode.dev](https://shubhankarsarkar.hashnode.dev/architecture-and-design?utm_source=hashnode&utm_medium=feed) [Sep 12](https://hashnode.com/posts/architecture-and-design/6aa5c2058e575cf3f0d21197) ### [Onboarding a Partner to Your API: A Step-by-Step Entra Runbook](https://shubhankarsarkar.hashnode.dev/onboarding-a-partner-to-your-api-a-step-by-step-entra-runbook?utm_source=hashnode&utm_medium=feed) Part 6 of 6 in the Entra ID Authentication: A Field Guide series. Every article on this topic explains the pieces. Very few say what order to do them in, or what you actually put in the email to the p 17 min read · [shubhankarsarkar.hashnode.dev](https://shubhankarsarkar.hashnode.dev/onboarding-a-partner-to-your-api-a-step-by-step-entra-runbook?utm_source=hashnode&utm_medium=feed) [Sep 12](https://hashnode.com/posts/onboarding-a-partner-to-your-api-a-step-by-step-entra-runbook/6aa5919e1af2c1c99a0e73d0) ### [Validating Entra Tokens in Azure API Management](https://shubhankarsarkar.hashnode.dev/validating-entra-tokens-in-azure-api-management?utm_source=hashnode&utm_medium=feed) The validate-jwt policy, client certificates, and the v1/v2 issuer trap that costs everyone an afternoon. 5 min read · [shubhankarsarkar.hashnode.dev](https://shubhankarsarkar.hashnode.dev/validating-entra-tokens-in-azure-api-management?utm_source=hashnode&utm_medium=feed) [Sep 12](https://hashnode.com/posts/validating-entra-tokens-in-azure-api-management/6aa590c4fd3cec98c7c33acd) ### [Secretless Azure: Managed Identities and Workload Identity Federation](https://shubhankarsarkar.hashnode.dev/secretless-azure-managed-identities-and-workload-identity-federation?utm_source=hashnode&utm_medium=feed) Why a secret in Key Vault is not the answer, and what to use instead. 9 min read · [shubhankarsarkar.hashnode.dev](https://shubhankarsarkar.hashnode.dev/secretless-azure-managed-identities-and-workload-identity-federation?utm_source=hashnode&utm_medium=feed) [Sep 12](https://hashnode.com/posts/secretless-azure-managed-identities-and-workload-identity-federation/6aa590189dbf2aa77fe1637d) ### [OAuth 2.0 Grant Types in Azure: Which to Use, and Which Are Dead](https://shubhankarsarkar.hashnode.dev/oauth-2-0-grant-types-in-azure-which-to-use-and-which-are-dead?utm_source=hashnode&utm_medium=feed) Authorization code with PKCE, client credentials, on-behalf-of — and the two flows to stop reaching for. 6 min read · [shubhankarsarkar.hashnode.dev](https://shubhankarsarkar.hashnode.dev/oauth-2-0-grant-types-in-azure-which-to-use-and-which-are-dead?utm_source=hashnode&utm_medium=feed) [Sep 12](https://hashnode.com/posts/oauth-2-0-grant-types-in-azure-which-to-use-and-which-are-dead/6aa58f1292b46191a441b403)