What the TestEnvironment OneLogin provider seeds, how it proves it owns a role with no description, and role grants the API accepts and never applies.

Test Intune scripts before Intune does: static analysis, a runtime harness, Pester assertions

What the TestEnvironment PingOne provider seeds, how it proves it owns a user with no free-text field, and why a boolean attribute has to be text.

What the TestEnvironment Authentik provider seeds above the directory: flows, policies, bindings, outposts, and objects that govern nothing.

If you want to hide your identity from Windows 11's Start menu, Microsoft has introduced a change that lets you do just that.

What a year and a six-provider merge did to TestEnvironment's Okta provider: verification, repair and cross-directory comparison under a ten-user cap.

How TestEnvironment's Entra provider bootstraps its own service app, holds its objects in administrative units, and seeds policies that never enforce.

What the TestEnvironment Active Directory provider seeds, and how it tears a lab domain down, set against the standalone module it replaced.

ALT: Solo Leveling: Sung Jinwoo Commands 'Arise'

Why a hand-built lab agrees with the script under test, and how one PowerShell module seeds five identity providers with data designed to disagree.

Seeds a realistic identity test environment in Entra ID, Active Directory, Okta, Authentik or FreeIPA - users in every lifecycle state, groups, devices and hosts, and the access policy over them - and...

Running a FreeIPA replica in a container on Ubuntu: systemd without privileged mode, macvlan addressing, and proving replication really works.

In case opening the Copilot sidebar in Outlook is too much work for you, Microsoft is bringing its AI assistant directly into the text editor.

Hardening FreeIPA before enrollment, then the sudo provider, sudo-rs and NFS group-resolution traps that break directory logins on Linux clients.

Installing FreeIPA on Rocky as an Active Directory alternative, its integrated DNS, and the traps in migrating a zone off Pi-hole and Cloudflare.

Wiring Proxmox VE to authentik with a native OIDC realm, using no proxy and no outpost, plus the four mismatched values that broke the login.

Forward auth in front of a NAS that serves its own web interface, and the firewall rule that turns the proxy from a convention into a boundary.

Removing an application login so a forward auth proxy becomes the single gate, and the network conditions that decide whether doing so is safe.

Exposing authentik through a Cloudflare tunnel, and why an access policy can cover only the admin console and never the whole hostname it sits on.

Wiring authentik forward auth through Caddy with one reusable snippet, and securing the cross-host subrequest that carries the session cookie.

Moving a reverse proxy to Caddy for built in ACME renewal, compiling in the Cloudflare DNS module, and why the bundled self-signed cert falls short.

Deploying authentik 2026.8.0 with Docker Compose: the compose stack, the docker.sock line to delete, and why ufw does not filter a published port.

Predicts which accounts, services and clients a Kerberos encryption type hardening change will break, before the change is made. Collects events 4768, 4769 and 4771 from domain controllers or archived...

Moving off Ghost(Pro) to Hugo on Azure Static Web Apps with no post URL changed: permalink config, the tag slug trap, and the og:image mistake.

Anthropic is warning some Claude users that infostealer malware on their PCs has stolen active Claude login sessions, allowing attackers to access accounts and consume their usage.

Enterprise-grade PowerShell development standards and GitHub Copilot instructions for consistent, secure, and high-quality PowerShell code across teams and projects. - fadwen/Powershell-Copilot-Sta...

Two firewall changes in one maintenance window. By morning one box pings the gateway, cannot reach the Plex VM, and looks perfectly healthy in UniFi. Routing is fine. It is working from a cache writt...

Flipping msDS-SupportedEncryptionTypes is one line. I have never once been nervous about the line. I am nervous about the call two days later: a nightly job stopped, and nobody can say why. The attri...

A utility script died on a fresh Windows 11 box. wmic bios get serialnumber, gone, and the DISM command that puts it back stops working this month. The one-liners map onto Get-CimInstance cleanly. Th...

A report-only CA policy, and one question: if I enable it, who stops being able to work? What If gave me thirteen rows and no answer. So I wrote a PowerShell module that folds them into one.

A service's cert I don't use much had expired. Turns out certbot had been failing twice a day for months and nothing said a word. Port 80 is blocked on my home line, so HTTP-01 was never an option. W...