This is funwithtokens.dev, a working log about identity and access management. Mostly Entra ID and Azure RBAC, but other systems will show up too. I’ll post my notes here on inspecting token claims from various issuers and flows, techniques for analyzing logs, and useful queries. I’ll also cover reading email headers and what they reveal about authentication.
You’ll also find code samples for managing your identity configuration as code. Since I also run IT for a non-profit, we’ll look at free or nearly free solutions that work on a tight budget.
That’s it. Let’s write some code.
Discuss this post on LinkedIn
Comments here are off by design. Disagree, correct me, or share what your team's doing differently — the conversation lives where the practitioners are.