Skip to content
View salamraghe's full-sized avatar
  • Washington State

Block or report salamraghe

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
salamraghe/README.md

Abdisalam Abdirahman

I'm working toward IAM Support / IAM Engineer / PAM / Okta IAM roles. I don't just say I know this stuff. Every lab below has screenshots of the actual work, the things that broke, and how I fixed them.

The job, the way I see it: give people the access the ticket asks for, put MFA in front of it, and take it away when they're done.

Labs (proof first)

  • CyberArk PAM 12.6: Onboarded a Domain Admin service account into a safe, had a requester ask and an approver sign off (dual control), had CPM rotate the password, opened a recorded PSM session, then removed the requester's access.
  • Okta SSO / MFA: Created a test user, put them in an app group, required MFA for the SAML app, proved SSO into a demo SP, then revoked access by removing group membership.
  • Microsoft Entra ID: Users, groups, P2 licensing, Conditional Access MFA on a security group, a leaver offboard, SAML SSO, and OIDC (jwt.ms) in a real tenant.
  • AD user lifecycle: On a Windows Server 2022 DC, created users, assigned group access, disabled a leaver, and documented membership.

Contact

Reach me here on GitHub.

Popular repositories Loading

  1. active-directory-enterprise-security-lab active-directory-enterprise-security-lab Public

    Built a multi-VM enterprise cybersecurity lab to practice Active Directory, identity and access administration, Windows and Linux system management, network configuration, log monitoring, and secur…

  2. entra-iam-lab entra-iam-lab Public

    Microsoft Entra ID lab: users/groups, Conditional Access MFA, leaver offboard, SAML + OIDC SSO

  3. ad-user-lifecycle ad-user-lifecycle Public

    Active Directory user lifecycle lab (Windows Server 2022): create users, assign groups, disable leaver, document access

  4. cyberky-lldap-least-privilege cyberky-lldap-least-privilege Public

    LLDAP least-privilege lab: read-only tier group, analyst kept out of admin, proven by sign-in

  5. okta-sso-mfa okta-sso-mfa Public

    Okta lab: grant → MFA → SAML SSO → revoke (group-based app access)

  6. vault vault Public

    Private offline video/audio library (home-screen web app)

    JavaScript