Identity, SSO & OAuth 2.0 / OIDC

Identity is the part of a platform that is hardest to retrofit. I've been the application architect for a multi-tenant identity and access management (IAM) platform serving multiple Sharjah government entities — an OAuth 2.0 / OpenID Connect authorization server that other teams' applications and APIs rely on.

That work covers the whole chain: how tokens are issued and validated, how tenants stay isolated, how scopes and roles map to permissions, and how sign-in federates in through UAE PASS and Azure Entra ID.

If you're integrating UAE PASS, adding single sign-on to an existing platform, or designing an authorization server for several tenants, this is the work I can help with.

What I deliver

  • OAuth 2.0 / OIDC flow design

    Authorization Code with PKCE, Client Credentials and On-Behalf-Of flows, token issuance strategy, audience validation and secure API protection patterns.

  • Multi-tenant IAM

    Tenant isolation, tenant-aware RBAC and fine-grained scope definitions, so each entity sees and controls only its own data.

  • UAE PASS and Azure Entra ID federation

    Identity-propagation contracts, trust boundaries and integration standards for the applications that consume sign-in.

  • Security-by-design reviews

    Threat modelling, least-privilege access, secure-by-default API configuration, secrets management and audit-log readiness, plus security architecture reviews of new initiatives and vendor-supplied components.

  • Guidance for your team

    Architecture guidelines, structured code reviews and coaching on OAuth edge cases and secure coding practices.

Selected work

  • OnePortal IAM — authorization server

    .NET 8, ASP.NET Core. Multi-tenant OAuth 2.0 / OIDC authority with UAE PASS and Azure Entra ID federation, adopted across the department's services.

  • Cyber-security alignment

    Primary engineering liaison with Sharjah's Cyber Security and IT Security teams, translating security policy into concrete architectural controls across the application estate.

Technologies

  • OAuth 2.0
  • OpenID Connect
  • JWT
  • PKCE
  • UAE PASS
  • Azure Entra ID
  • ASP.NET Core / .NET 8
  • RBAC
  • Threat modelling

Case studies