Expert in OAuth 2.0 and OIDC: on-behalf-of flows, app registrations, service principals, workload identity federation and managed identities. Conditional Access, Entra ID Governance (lifecycle workflows, access reviews, entitlement management) and Privileged Identity Management.