IDENTITY / CLOUD / APPLICATION SECURITY
Hybrid Identity & Access Management
A hybrid identity design connecting on-premises directory services, Entra ID, role-based access, and web-app authentication.
Academic team project · May 2026 · Velvet Vice scenario
THE APPROACH
Technical detail.
Clear decisions.
This project brings together practical implementation thinking, clear documentation, and an emphasis on making complex technical work understandable and useful.
PROJECT WALKTHROUGH
Inside the work
Build the directory foundation
The team project set up Active Directory in a virtualized environment, including domain controller deployment, organizational units, groups, and users. Microsoft Entra ID was configured as the cloud identity side of the design.
Connect on-premises and cloud identities
Azure AD Connect was used in the project workflow to synchronize identities. The architecture makes the relationship between directory objects, cloud identities, and access policy visible.
Secure the application sign-in
The project included OAuth 2.0 setup for a web application and testing access in the hybrid environment. Role-based access control was addressed across directory and cloud identity components.
Coordinate, document, test
The project was organized into nine work areas spanning team roles, company background, directory setup, cloud identity, synchronization, RBAC, OAuth, testing, and final documentation.