Projects on krisby.dev

Identity-Centric Security Design for Healthcare

Fri, 29 May 2026 00:00:00 +0000

Background

I built this project to explore how identity and access management could be designed for a small healthcare environment handling sensitive information.

The goal was to better understand how technologies such as Microsoft Entra ID, Conditional Access, FIDO2, RBAC and Managed Identities can work together as part of a modern security design.

Rather than focusing primarily on network-based security, I wanted to explore what happens when identity becomes the primary security boundary.

Cloudflare Access Federation with Entra ID

Sat, 23 May 2026 00:00:00 +0000

Background

I wanted to better understand how federation, provisioning and Zero Trust access work in practice between Microsoft Entra ID and Cloudflare Access.

The goal was to explore how identity can be used as the primary security boundary and how access can be managed through groups rather than individual users.

What I Built

In this lab I integrated Microsoft Entra ID with Cloudflare Access using:

OpenID Connect (OIDC)
SCIM provisioning
Group-based access control
Automated user and group synchronization

Architecture:

AI-Assisted Azure RBAC Analysis

Fri, 13 Mar 2026 00:00:00 +0000

Background

I wanted to gain a better understanding of Azure RBAC in practice while also exploring whether AI could be used to help identify excessive permissions and access-related risks.

The goal was not to build a production-ready security tool, but to combine hands-on RBAC testing with AI-assisted analysis and see what insights could be generated.

What I Built

I created a small Azure lab environment consisting of:

Resource Groups
Virtual Machines
Network resources
Users and groups

I then assigned different RBAC roles to simulate a realistic access model.

JML Monitor for Microsoft Entra ID

Tue, 10 Feb 2026 00:00:00 +0000

Background

I wanted to better understand Joiner, Mover and Leaver (JML) processes in practice, how access changes over time, and how access drift can be detected within Microsoft Entra ID.

At the same time, I wanted to gain hands-on experience with Microsoft Graph API and explore how identity data can be analyzed programmatically.

What I Built

I developed a simple monitoring solution that collects users and group memberships from Microsoft Entra ID and compares the current state against historical snapshots.