access-governance

Find privilege that was granted and never used: unused permissions, narrowable roles, dormant principals, and ungranted use.

Production-ready SailPoint IdentityIQ rules, mock contexts, and governance patterns. Testable without a license

A tool to manage external access in Google Drive.

Evidence-backed ownership and dependency assessment for Microsoft Entra service principals across Microsoft Graph, Azure RBAC, Activity Logs, and Azure Storage.

Enterprise Identity and Access Management case study demonstrating access requests, approvals, Active Directory provisioning, verification, and audit workflow.

Cloud engineering portfolio demonstrating Azure and AWS cloud administration, identity governance, cloud security controls, secure data access, analytics platform management, monitoring, automation, and platform operations.

Serverless AWS access recertification engine: discover resources by owner tag, collect keep/trim/revoke decisions, and actually enforce them with scoped changes, hash-chained evidence, and rollback.

SailPoint IdentityIQ-style IAM simulator — Lifecycle, RBAC, SoD, AI Risk Scoring, NHI, JIT Access & AI Copilot

The open source repo for Oracle Access Governance Data Feed Analytics (DFA)

The KeyClerk edge protocol: the specification between KeyClerk and its edges, and its conformance set. EUPL-1.2. Stewarded by VDHome.

KeyClerk: access governance for Keycloak. Access for a time, through signed approvals, that ends by itself. EUPL-1.2. Stewarded by VDHome.

Hands-on IAM and cloud security portfolio featuring Microsoft Entra ID labs, access governance, MFA, Conditional Access, lifecycle support, and public-safe documentation.

Enterprise Access Governance & Recertification Platform built with Spring Boot, PostgreSQL, and Docker.

Okta Workforce IAM lab (5 labs) : SAML SSO, RBAC, MFA, JML, Group Rules and Access Governance.

Hands-on Identity and Access Management projects in Microsoft Entra ID and Active Directory, organized by capability: joiner, mover and leaver lifecycle, identity governance (access packages, access reviews, PIM), Conditional Access, app consent, and hybrid directory sync.

Govern access requests through accountable decisions and recorded outcomes.

A Python-based IAM governance automation tool that uses Microsoft Graph API to assess Microsoft Entra ID users, groups, privileged roles, service principals, app permissions, guest access, stale identities, and access review gaps, then generates risk-scored governance findings and remediation reports.

Public-safe IAM analyst lab showing SailPoint ISC governance review, lifecycle access analysis, certification context, and sanitized findings.

Deterministic offline analysis of synthetic ERP security evidence, with explainable controls, replayable detection, and JSON, HTML, and SARIF reports.

Enterprise data governance operating system with stewardship workflows, data quality controls, metadata and lineage design, access governance, issue and change management, KPI monitoring, and implementation planning.