About

Hi, I’m Andreas Krisby.

I’m based outside Malmö, Sweden, and work in healthcare IT.

My interest in IAM and identity security actually started through healthcare. When you work around systems that handle patient data, you quickly realize how important it is that the right people have access to the right things at the right time.

Who should have access? How does a system know who you are? What happens when someone changes roles or leaves an organization? How does all of this actually work behind the scenes?

Those are the kinds of questions that got me interested in identity.

I’m not someone who learns best by only reading documentation. Most of the time, I learn by building labs, testing things, breaking configurations, troubleshooting problems, and trying to understand why something works — or why it doesn’t.

This site is mostly a place where I document what I’m learning along the way.


Right now, I’m spending a lot of time learning more about

  • Microsoft Entra ID
  • Conditional Access
  • Hybrid Identity
  • Identity Governance
  • OIDC and OAuth 2.0
  • Provisioning
  • Zero Trust
  • Cloud Security

I often find myself going down rabbit holes around authentication, federation, permissions, and how identities move between different systems.

What interests me most is understanding how identity systems behave in the real world, not just in documentation or polished demo environments.


Things I’m Working With

Identity & Access Management

  • Microsoft Entra ID
  • Conditional Access
  • Identity Protection
  • SCIM Provisioning
  • OIDC & OAuth 2.0
  • RBAC
  • MFA & FIDO2
  • Hybrid Identity

Cloud & Security

  • Azure Fundamentals
  • Microsoft 365
  • Microsoft Defender
  • Least Privilege
  • Access Governance
  • Security Monitoring
  • Zero Trust

Tools

  • PowerShell
  • Microsoft Graph
  • KQL
  • Git & GitHub
  • Cloudflare Zero Trust

How I Learn

I learn best by building things myself.

Instead of only reading documentation or watching courses, I usually create lab environments, test different scenarios, troubleshoot problems, and write down what I learn along the way.

That process has helped me understand identity and access management much better, especially how authentication, permissions, provisioning, and security controls fit together in real environments.


What I’m Working Towards

Right now, my goal is simple: keep learning and keep improving.

I’m working toward a future role in IAM and cloud security, ideally somewhere I can continue building practical skills while working with modern identity platforms and security technologies.

Until then, I’ll keep building labs, documenting what I learn, and asking way too many questions.