Identity & cloud architect. I spend most of my time around Microsoft Entra ID, verifiable credentials / EUDI wallets, and infrastructure as code on Azure.
I enjoy mountain biking (MTB) and spending time in the sauna, but since this is GitHub, let's focus on tech! ;)
Prediction is very difficult, especially about the future.— Niels Bohr
Find me: mjendza.net · github.com/mjendza
- What I Build
- Digital Identity — verifiable credentials, EUDI, OAuth/OIDC, CIAM
- Microsoft Entra ID — the big one
- Azure and Cloud Architecture
- Software Architecture
- AI
- Tools and Workstation
- Home Lab and Smart Home
- People, Blogs and Feeds
- OS and Hardware
- Fun and Off-topic
Everything below is a personal, opinionated collection of links and resources that changed how I work.
- workshop-entra-as-code-interactive — hands-on workshop: managing Microsoft Entra ID declaratively, as code.
- terraform-provider-verifiedid — Terraform provider for Microsoft Entra Verified ID.
| Name | Details & Supported Format | Link |
|---|---|---|
| FIDES Community | Discover organizations shaping the global ecosystem of digital wallets and verifiable credentials | https://fides.community/organizations/ |
| Paradym | Dedicated Wallet (format: sd+vc-json)* | https://paradym.id/ & https://play.google.com/store/apps/details?id=id.paradym.wallet |
| Entra Verified ID | Authenticator App + Wallet SDK from MS | https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-verified-id |
| Demo: vcplayground | jwt-vc-json | https://vcplayground.org/ |
| Demo: funke.animo.id | EUDI/cred-ts | https://funke.animo.id/ - (test credo-ts solution) |
| Test & Playground EUDI Dev Wallet | EUDI | https://eudi-test.dev |
| Unofficial EUDI Wallet Dev Toolkit | EUDI | https://github.com/dominikschlosser/eudi-dev |
| WalletSDK | works with vcplayground (format:jwt-vc-json)* | https://github.com/trustbloc/wallet-sdk |
| credo-ts | Full VC Backend (format:sd+vc-json) hosted with docker compose 💪 | https://github.com/openwallet-foundation/credo-ts https://credo.js.org/ |
| walt.id | Backend with wallet | https://docs.walt.id/community-stack/home |
| bifold | React native wallet | https://github.com/openwallet-foundation/bifold-wallet |
| MS Authenticator App | VC Wallet Product | |
| .Net Wallet | Not Updated for long time | https://github.com/openwallet-foundation-labs/wallet-framework-dotnet |
| didwebvh /didwebvh-ts | play with did:webvh | https://github.com/decentralized-identity/didwebvh-ts |
| Apostille - Verifiable Credentials Platform | https://github.com/openwallet-foundation-labs/apostille |
*Not confirmed via official pages and documentation
- https://openid.net/specs/openid-4-verifiable-credential-issuance-1_0.html
- https://openid.net/specs/openid-4-verifiable-presentations-1_0.html
- https://openid.net/specs/openid4vc-high-assurance-interoperability-profile-1_0-final.html
- https://github.com/pic-protocol/pic-spec/blob/main/draft/0.1/pic-spec.md
- Wallet to Wallet https://docs.eudi.dev/latest/reference-implementation/feature-map/#wallet-to-wallet
- Specification of Strong Customer Authentication (SCA) Implementation with the Wallet
Android:
- https://android-developers.googleblog.com/2025/04/announcing-android-support-of-digital-credentials.html
- https://developer.android.com/identity/digital-credentials/credential-verifier
- https://developer.android.com/identity/digital-credentials/phone-number-verification
iOS:
- VC for Europeans
- eIDAS test site
- Decentralized Identifiers (DIDs) as an Identifier Metasystem
- Awesome Self-Sovereign Identity
- https://github.com/decentralized-identity/didcomm-messaging
- https://demo.didcomm.org/ 🔼
- CH https://github.com/e-id-admin/eidch-android-wallet
- EU https://github.com/orgs/eu-digital-identity-wallet/repositories
- KeyCloack https://keycloak-day.dev/assets/files/Norimatsu_KeycloakDevDay2025_Darmstadt.pdf
- https://www.verifiedorchestration.com/
- EU: Digital Product Passport DDP
- to check: https://www.ethentic.eu/
- Takahiko Kawasaki/VC Deep Dive/Issuing verifiable credentials in the SD-JWT VC and mdoc/mDL formats, mandated in eIDAS 2.0
- How VC Issuance works
- DID Resolver: https://dev.uniresolver.io/
- OCTA: OAuth 2.0 and OpenID Connect (in plain English)
- OAuth – the good Parts - Dominick Baier - NDC Oslo 2021
- An Illustrated Guide to OAuth and OpenID Connect
- https://www.nango.dev/blog/why-is-oauth-still-hard
- awesome-iam
- Openid Connect Diagram - get token via confidential client
- Authentication with multiple identity providers
- 🔒 Demystifying cookies and tokens
- DPoP https://auth0.com/docs/secure/sender-constraining/demonstrating-proof-of-possession-dpop & https://auth0.com/blog/protect-your-access-tokens-with-dpop/
- https://brave.com/blog/zklogin/
- https://auth0.com/docs/authorization
- 🔒 FGA solution https://docs.permit.io/modeling/mesa-verde/ & DEMO https://github.com/permitio/mesa-verde-banking-demo
- Cedar video & into token Cedar policy with an access token
- https://blog.christianposta.com/api-keys-are-a-bad-idea-for-enterprise-llm-agent-and-mcp-access/
- https://www.linkedin.com/pulse/implementing-mcp-dynamic-client-registration-spiffe-keycloak-posta-ccryf
- Annotated Version of NIST Special Publication (SP) 800-63-4, Digital Identity Guidelines: https://www.tcannex.com/p/annotated-nist-sp-800-63-4
- CIAM MS Overview: https://www.microsoft.com/en-us/security/business/security-101/what-is-ciam
- https://auth0.com/
- https://stytch.com/
- https://www.descope.com/
- https://clerk.com
- 🔒 AWS Cognito Sample https://medium.com/@samudurand/protecting-lambda-urls-with-cognito-iam-lambda-edge-and-cdk-4ac79f9e779c
- Microsoft Woodgrove Groceries -> Azure AD B2C MS Demo
- Microsoft Woodgrove Groceries -> Entra External ID for Customers MS Demo
- https://github.com/discord/access
- https://github.com/jhaals/yopass
- https://github.com/JanssenProject/jans
- https://github.com/jelhub/scimgateway
- Debug OIDC flows: https://oidcdebugger.com/debug
- Review & analyze tokens: https://jwt.ms & https://jwt.io
- Generate tokens: https://token.dev/
- Test FIDO2/Passkeys: https://www.token2.swiss/tools/fido2-demo
- SAML DevTools extension
- Online SMS service to test OTP: https://anonymsms.com/
- Temporary Email Service (allows custom email addresses): https://www.minuteinbox.com/
- Virtual Phone Numbers: https://www.twilio.com/en-us/phone-numbers
- A verification tool to replace CAPTCHA: https://www.cloudflare.com/products/turnstile/
- https://www.iredmail.org/
- https://github.com/merill/awesome-entra
- Big picture diagram: https://github.com/msandbu/azuread
- Journey to Azure AD PRT- Primary Refresh Token
- Entra Primary Refresh Token
- Understanding Entra ID App Registrations, Enterprise Applications and Service Principals (part 2)
- Agent ID: https://learn.microsoft.com/en-us/entra/agent-id/identity-platform/
- https://derkvanderwoude.medium.com/agent-identity-security-demystified-2ecb164239bf
- 🔒 https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-configure-kerberos-sso
- Workload Identity Protection
- Governance
- Managed ID
- App Registrations, Enterprise Apps and Service Principals
- PIM
- Deep Dive into Entra: Exclusive Outage Stories & Architectural Innovations
- Actor tokens security issue: https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/
- ACS: https://learn.microsoft.com/en-us/previous-versions/azure/active-directory/azuread-dev/active-directory-acs-migration
- https://learn.microsoft.com/en-us/entra/fundamentals/whats-new-ignite-2025#microsoft-entra-external-id
- https://learn.microsoft.com/en-us/entra/identity/hybrid/user-source-of-authority-overview
- https://learn.microsoft.com/en-us/entra/identity/authentication/synced-passkey-faq
- Feature plan & list (not official): https://deltapulse.app/dashboard
- https://tech.nicolonsky.ch/AiTM-Phishing-with-Azure-Functions/
- https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
- https://learn.microsoft.com/en-us/entra/id-governance/licensing-fundamentals#features-by-license
- An introduction to Azure AD Identity Governance
- https://www.christianfrohn.dk/2025/01/15/monitoring-access-package-delivery-status-in-entra-id-governance/
- https://janbakker.tech/dynamic-approval-in-entra-id-access-packages-using-custom-extensions/
- Review permissions: https://m365scripts.com/microsoft365/manage-entra-id-delegated-permissions-for-specific-users-using-microsoft-graph/
- https://learn.microsoft.com/en-us/entra/identity/conditional-access/service-dependencies
- https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-cloud-apps?tabs=powershell#office-365
- https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-token-protection
- https://cloudbrothers.info/en/conditional-access-bypasses/
- https://device-insight.com/en/developers-blog/use-azure-ad-workload-identity-for-pod-assigned-managed-identity-in-aks/
- https://johnlokerse.dev/2024/05/05/setup-azure-devops-workload-identity-federation-using-azure-bicep/
- https://ourcloudnetwork.com/direct-managed-identity-or-federated-managed-identity/
- https://learn.microsoft.com/en-us/entra/identity-platform/tutorial-custom-authentication-extension-account-recovery?tabs=azure-portal
- https://github.com/Azure-Samples/active-directory-verifiable-credentials-dotnet/tree/main/7-AccountRecovery-ClaimsMatching
- https://github.com/Cloud-Architekt/AzureAD-Attack-Defense
- https://github.com/reprise99/Sentinel-Queries
- https://learn.microsoft.com/en-us/security/operations/incident-response-playbooks
- https://learn.microsoft.com/en-us/entra/architecture/security-operations-introduction
- https://github.com/guardzcom/security-research-labs/tree/main/AI-Cloud-Tools/M365-Tools/EntraReaper
- Workbooks: https://github.com/davidalonsod/Dalonso-Security-Repo/tree/main/Workbooks
- https://www.systanddeploy.com/2025/10/dashboard-of-windows-authentication.html
- https://learnsentinel.blog/2022/06/21/kql-lessons-learnt-from-365daysofkql/
- https://github.com/davidalonsod/Dalonso-Security-Repo
- https://github.com/benscha/KQLAdvancedHunting
- 📌 My workshop: Entra as Code
- https://registry.terraform.io/providers/hashicorp/azuread/latest
- https://www.terraprovider.com/
- https://blog.kewalaka.nz/post/2025/11/avm-pim-group-module/
- https://mattias.engineer/blog/2026/terraform-github-1/
- https://github.com/microsoft/EntraExporter
- https://github.com/microsoft/Microsoft365DSC
- https://github.com/kayasax/SCIMTool
- https://github.com/ThomasKur/M365Documentation
- https://github.com/Cloud-Architekt/EntraOps
- https://github.com/LETHAL-FORENSICS/Microsoft-Analyzer-Suite
- https://github.com/Noble-Effeciency13/M365IdentityPosture
- https://github.com/Semperis/EntraGoat
- https://github.com/IdentityMan/MasterclassELDK26
- https://github.com/maester365/maester
- https://github.com/jflieben/DriftMaester
- https://permissions.factorlabs.pl/
- https://entrascopes.com/
- https://github.com/merill/microsoft-info
- https://entratracker.aboutcloud.io/
- https://docstracker.marshsecurity.org/
- Summary of MS samples & platforms: https://learn.microsoft.com/en-us/entra/identity-platform/sample-v2-code
- ASP.NET Web App - Confidential Client: https://github.com/Azure-Samples/active-directory-aspnetcore-webapp-openidconnect-v2
- https://github.com/Azure-Samples/active-directory-dotnetcore-daemon-v2
- JavaScript Public Client: https://github.com/Azure-Samples/ms-identity-docs-code-javascript
- For External ID sample: https://github.com/Azure-Samples/ms-identity-ciam-javascript-tutorial
- Graph Explorer (with tenant-id param): https://developer.microsoft.com/en-us/graph/graph-explorer?tenant={{tenant-id-here}}
- OAuth - Native Flow Authorization Code Flow Diagram + Postman Collection
- Postman Oauth Entra ID Collection
- Default Azure Credentials
- MCP + Azure OAuth2 OBO: https://jaydoubleu.dev/guides/mcp-azure-oauth2-obo
- https://gist.github.com/rbrayb/847be01d7f2c532d66cf07ad84d6466d
- OpenID Connect details: https://learn.microsoft.com/en-us/azure/active-directory-b2c/openid-connect
- Debugging setup: VS Code + B2C extension + App Insights debugger
- https://learn.microsoft.com/en-us/entra/external-id/external-identities-overview#comparing-external-id-feature-sets
- https://learn.microsoft.com/en-us/entra/external-id/customers/concept-supported-features-customers
- https://learn.microsoft.com/en-us/entra/identity/users/convert-external-users-internal
- 🔒 https://learn.microsoft.com/en-us/entra/architecture/external-identity-deployment-architectures
- Refresh Token: AzureAD/microsoft-authentication-library-for-js#5137
- https://learn.microsoft.com/en-us/entra/msal/dotnet/acquiring-tokens/desktop-mobile/linux-dotnet-sdk-wsl
- MSAL - Retry policies
- MSAL Logger
- https://swjm.blog/the-complete-guide-to-rdp-with-yubikeys-fido2-cba-1bfc50f39b43
- https://mjshellenberger.com/2024/10/31/configure-microsoft-cloud-pki-a-step-by-step-guide/
- https://github.com/Azure/Enterprise-Scale
- https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/landing-zone/ with a nice Visio drawing
- https://github.com/Azure/ALZ-Bicep/wiki/Accelerator
- GitHub - ACA-Landing-Zone-Accelerator
- https://github.com/Azure/terraform-azurerm-lz-vending
- Prepare your Azure Cloud Environment with the Cloud Adoption Framework
- Terraform CAF Enterprise Scale walkthrough & https://github.com/Azure/terraform-azurerm-caf-enterprise-scale
- https://github.com/mivano/azure-cost-cli
- https://azurealan.ie/2025/11/08/using-traffic-manager-to-failover-or-bypass-azure-front-door/
- https://azurecharts.com/
- https://blog.tyang.org/2021/12/06/monitoring-azure-policy-compliance-states-2021-edition and connected repo: https://github.com/andrewmatveychuk/azure.policy
- https://medium.com/@omaxel/allow-access-to-azure-app-service-only-from-azure-front-door-bdfa16bc675d
- https://cloudtips.nl/securing-azure-web-apps-and-function-apps-with-azure-front-door-e4a5e4071290
- https://azure.github.io/Azure-Verified-Modules/
- https://github.com/Azure/bicep-registry-modules
- https://medium.com/into-alm/configuration-as-code-moving-away-from-library-groups-in-azure-devops-e9ff683d150d
- https://github.com/arindam0310018/10-Oct-2023-DevOps__Workload-Identity-Federation-with-Service-Principal-Using-Terraform
- https://spacelift.io/ (Terraform & OpenTofu)
- https://registry.terraform.io/modules/Azure-Terraformer/atat/github/latest
- Architecture Styles Worksheet: https://www.developertoarchitect.com/downloads/architecture-styles-worksheet.pdf
- https://jacquiread.com/posts/software-design/
- Distributed systems real-life example: https://www.enterpriseintegrationpatterns.com/ramblings/18_starbucks.html
- Advanced API and Integration Problems & Patterns - Udi Dahan - NDC Oslo 2022
- 💥 Learn Advanced Distributed Systems Design
- Microfrontends that don't hurt (ASP.NET Core)
- 📖 The Software Architect Elevator
- 📖 Designing Data-Intensive Applications
- 📖 Database Internals
- 🔨 (Almost) Every infrastructure decision I endorse or regret after 4 years running infrastructure at a startup
- Functional Programming on .NET - The Best of Both Worlds - Isaac Abraham - NDC Oslo 2024
- Let's build the worst Event Sourcing system! - Oskar Dudycz - NDC London 2024
- 🔨 PL Async Internals in .NET
- Serverless Chats: Streaming Data at Scale Using Serverless with Anahit Pogosova Part 1
- Serverless Chats: Streaming Data at Scale Using Serverless with Anahit Pogosova Part 2
- https://backstage.io & https://github.com/backstage/backstage
- https://www.websequencediagrams.com/
- 👑 https://plantuml.com/ & https://github.com/plantuml-stdlib/C4-PlantUML
📌 Dedicated page: what I use daily, Claude Code, MCP servers →
- https://techcommunity.microsoft.com/blog/azure-ai-services-blog/graphrag-end-to-end-poc/4361080
- https://learn.microsoft.com/azure/cosmos-db/gen-ai/quickstart-rag-chatbot
- Microsoft Learn MCP Server https://github.com/MicrosoftDocs/mcp
- Lokka - MS Entra Graph API MCP: https://lokka.dev/docs/install
- Atlas MCP server that provides access to Microsoft Graph API using Entra ID authentication with On-Behalf-Of (OBO) flow: https://github.com/JasSuri/atlas
- https://github.com/rinadelph/Agent-MCP
- https://techcommunity.microsoft.com/blog/azure-ai-foundry-blog/deployment-guide-copilot-studio-agent-with-mcp-server-exposed-by-api-management-/4462432
- Mock Service (useful for checking request payloads 😉): https://beeceptor.com/
- Temp mail (trashmail) as a service: https://github.com/HaschekSolutions/opentrashmail
- Find a free replacement: https://openalternative.co
- https://pagespeed.web.dev/
- HTTP benchmarking: https://github.com/codesenberg/bombardier
- 🔨 🔒 Secure your website with the right security headers — Mozilla Observatory and SecurityHeaders
- My own score: https://observatory.mozilla.org/analyze/mjendza.net
- https://blog.icewolf.ch/archive/2023/05/28/http-security-headers/
- Speed test with details: https://speed.cloudflare.com/
- https://report-uri.com/
- https://redbot.org/
- https://netbird.io/ (tailscale alternative)
- www.cloudflare.com Tunnel
- 😻 https://tailscale.com
- ngrok.com - need to pay 10$ for features
- Visual Studio IDE built-in proxy
Tailscale — enable proxy for a service:
tailscale serve --service=svc:my-name-of-service --https=3000 http://localhost:3000
- https://ntfy.sh/ (push notifications)
- Kleopatra - manage Yubikey certificates, etc https://apps.kde.org/kleopatra/
- Faking data and getting notification someone is accessing it (credit card, AWS credentials): https://canarytokens.org/generate
- https://www.base64decode.org/
- https://www.urlencoder.org/
- https://parseurlonline.com/
- https://asecuritysite.com/
- https://www.bestrandoms.com/random-address-in-us
- https://iancoleman.io/bip39/#english
- https://comparisontabl.es/cloud-storage/
- 😻 HomeAssistant: https://www.home-assistant.io/
- esphome https://esphome.io/ (ESP8266 | ESP32 | other => easy yaml config and push to HomeAssistant)
- Portainer https://www.portainer.io/ (Container Management for Docker)
- Home DNS server? Try PiHole https://pi-hole.net/
- OpenWrt as router OS https://openwrt.org/
- Smart switches and other devices https://www.shelly.com/
- HVAC: Salus Controls & Panasonic AC (with https://github.com/sockless-coding/panasonic_cc integration)
- https://mqtt-explorer.com/
- https://damienbod.com/
- https://identity-man.eu/
- https://www.troyhunt.com/
- https://scotthelme.co.uk/
- https://event-driven.io/ and the tag Architecture: https://event-driven.io/en/category/architecture/
- https://blog.codingmilitia.com/
- https://architectelevator.com/
- https://ericonidentity.com/
- https://discovery.cevolution.co.uk/ciam/
- Boris Cherny (Creator of Claude Code) On What Grew His Career And Building at Anthropic
- Hacking Formula 1: Accessing Max Verstappen's passport and PII through FIA bugs
- Wat
- Email vs Capitalism, or, Why We Can't Have Nice Things - Dylan Beattie - NDC Oslo 2023
- Foxes
- Mountain Biking
- Żywot programisty - Sorry, only for Polish programmers 👷
- Morse code translator: https://github.com/ozdemirburak/morse-code-translator