While I have many interests, if you are visiting this site - you are likely interested in my work with Identity and Access Managemnt. I use this space to capture and document all my findings and thoughtes related to IAM.
OktaToEntra Web App: From PowerShell Script to Self-Hosted Planner
Read more at projects.onthejourney.online/projects/oktatoentra-web. TL;DR: OktaToEntra started as a PowerShell module. It’s grown into a self-hosted web app - a FastAPI backend, a Next.js frontend, and a migration planner that tracks every app, owner, and readiness signal in one place. It’s deployable today and going through QA; the source stays private for now, with open-sourcing planned. Why a web app The PowerShell module was built to answer one question: which apps do we have in Okta, who owns them, and what order do we migrate them in? It’s good at that - discovery, usage analytics, lifecycle tracking - but it’s a console tool. Handing it to a project manager, a business owner, or anyone who isn’t comfortable in a terminal was never really on the table. ...
OktaToEntra: A PowerShell Companion Tool
Under Development - This tool is still under development and improvement. You can monitor status and progress at https://github.com/andrewhiz/OktaToEntra 📢 Update (as of March 25, 2026): PowerShell module development is currently on hold while a web application is being developed. The PowerShell module remains fully functional with its current feature set. TL;DR: Migrating applications from Okta to Microsoft Entra ID is a complex, multi-step process. I built OktaToEntra — a PowerShell module that can be your companion tool for discovery, planning, and tracking so you can focus on the actual SSO configuration work. ...
The Sync Gap
TL;DR: Your AD mobile numbers aren’t updating in Entra ID Hybrid environment? It’s likely that BypassDirSyncOverridesEnabled is not what you expect it to be. The Problem In hybrid Microsoft Entra ID environments, many admins are surprised to find that mobile numbers in Active Directory don’t sync to Entra for some users — even though all other attributes do perfectly. You also don’t see any signs of failure on Entra Connect log. ...