Introduction In the previous article, we covered how to create our environment and how to validate tokens. This time, we will explain how your backend API (still no AI topic in this article) can r...

Introduction I recently discovered an interesting tool called Entra Id Auth SDK (sidecar) following my new “hobby” around AI topics. In addition, the same week, I also discovered from Merill Ferna...

Introduction I’m using containers for my day-to-day job more and more. Yes, containers are great, but containers are not a silver bullet. You still have to update them on regular basis. When you ...

Introduction I’ve discovered today that admin consent is not necessary mandatory for your custom APIs. I don’t know if it’s something that most people know but at least to me this is new, here the...

Introduction I’ve recently done a knowledge sharing session about how to protect web API with Azure AD. Long story short, I’ve decided to use the Pode module in addition to MSAL.PS and ValidateAAD...

Introduction In GCP, people use a service account associated with private keys to run their workflows. The problem is that you have to commit the associated private key somewhere. This is where wo...

Introduction I’ve received recently a question which was “what would you do if you had to generate tokens (access and/or id) for non-coders?” In this case, the end user won’t be able to use MSAL o...

Introduction In the previous article, we’ve played with the storage api and exposed few limitations, this time we will play with Key vault. In this article, we will see how we can interact with a ...

Introduction The agent-based solution called Azure ARC for servers allows you to govern all your servers (Linux/Windows) which resided outside of Azure (located on-premises or in other public clou...

Introduction Before people start to bash me, I just want to clarify few things. I’m not pros or cons Kubernetes (K8s), I’m actually a K8s n00b and learn it is in my to-do list. But I understand ho...