Identity management
Plan account provisioning, onboarding, password recovery, and access removal. Compare NIM with other identity tools using practical evaluation criteria.
Current guides
Cut SaaS Spend by Reviewing Access First
Use Microsoft Entra access reviews and entitlement management to find unused SaaS access, then turn those findings into license cleanup and renew…
Read articleHow to Build a Simple Software License Review Process
Use Microsoft guidance to find unused licenses, align renewals to real usage, and assign owners for a repeatable renewal review.
Read articleNIM, Entra, Okta, SailPoint, or ManageEngine: where to start
Compare identity automation tools by the work you need done: provisioning, delegated support, access governance, and verified offboarding.
Read articleNIST identity guidance in 2026: what to change in your plan
Apply NIST SP 800-63 revision 4 to a 2026 identity review, with precise password rules, phishing-resistant options, and recovery checks.
Read articleNIM and MCP: connect an assistant without skipping access controls
Evaluate NIM’s MCP server with controlled credentials, limited data exposure, a test environment, and human review of consequential identity chan…
Read articleEmergency termination in NIM: verify access is actually removed
Build an urgent offboarding procedure around NIM, with authorized requests, target checks, session limits, and protection against accidental reac…
Read articleDelegate password resets in NIM without broad admin access
Give local support a defined password reset role in NIM, with restricted user scope, identity checks, audit records, and clear escalation rules.
Read articleMoving to Cloud-Only IT with Microsoft 365 E3 or E5
Plan a move to Microsoft 365: check identity dependencies, compare E3 and E5, pilot devices, and test recovery before retiring servers.
Read articleShared Passwords: How to Delegate Access Safely
Give staff access without sharing personal logins. Use named accounts, delegated permissions, controlled secrets, device locks, and clear offboar…
Read articlePlan NIM self-service password reset around recovery failures
Evaluate NIM self-service password reset with realistic lockout cases, secure verification, target synchronization checks, and a help desk fallba…
Read articleMFA for Small Businesses: A Practical Rollout Plan
Roll out MFA to email, administrator accounts, and remote access. Compare methods, prepare recovery, test a pilot, and check that enforcement wor…
Read articlePrivilege Creep: How to Review and Remove Unneeded Access
Find permissions left behind by role changes and old projects. Assign resource owners, review effective access, record decisions, and verify remo…
Read articleContractor Account Management: A Small Business Checklist
Manage contractor and vendor access with a named sponsor, approved permissions, an end date, regular reviews, and verified offboarding across app…
Read articleUse NIM onboarding to let new starters claim their own accounts
Separate account preparation from account claiming with NIM onboarding, then test identity verification, duplicate records, and support fallbacks…
Read articleDesign joiner, mover, and leaver automation with NIM
Plan NIM lifecycle automation around trusted source records, safe account matching, role changes, and target verification before scheduling jobs.
Read articleArchive and retrospectives
These articles describe earlier tools or a stated historical period. Read each article’s context before adapting its examples.
2025 retrospective: start security planning with identity owners
A 2025 retrospective on account ownership, joiner and leaver responsibilities, and governance, using primary sources published before the cutoff.
Read article2024 retrospective: map identity workflows with BPMN first
A retrospective using BPMN concepts available by December 2024 to define identity approvals, exceptions, and responsibilities before automation.
Read articleGoogle Apps Password Sync for AD: 2012 Release Note
A 2012 announcement reference and implementation comment about synchronizing Active Directory password changes to Google Apps.
Read articleBlackboard Connect 5 SOAP API with PHP 5.3: 2012 Example
A historical PHP 5.3 example for Blackboard Connect 5 SOAP authentication, XML submission, response inspection, and request debugging.
Read articleGoogle Apps for Education Integration Tools: 2012 List
A 2012 school integration resource list covering password sync, CAS, GAM, directory sync, PHP clients, and training.
Read articlePresenting Bethel’s Google Apps Migration at NCCE 2012
A March 2012 session announcement covering Bethel’s Google Apps migration decisions, training, technical work, and adoption.
Read articlePassword Strength and Passphrases: An XKCD Reference
A 2012 link to XKCD’s password-strength comic, with the original illustration and a related practical account-security guide.
Read articleBethel Google Apps Migration: NCCE 2012 Session Preview
A 2011 preview of a Bethel Schools NCCE 2012 presentation on its Google Apps migration, support, training, and technical integration.
Read articleCAS 3.4.7 with Active Directory Attributes: 2011 Setup
Archived CAS 3.4.7, Tomcat 6, and Maven 2 setup notes for returning LDAP and Active Directory attributes during single sign-on.
Read articleRenaming a Google Apps User with GAM: 2011 Example
A historical GAM command for changing a Google Apps username and surname, with the original Python-based tool reference.
Read articleActive Directory to Google Apps Password Sync: 2010 Notes
A historical account of Hashing Password Filter, a custom Active Directory attribute, and Google Apps password synchronization in 2010.
Read article