YouTubeNew identity labs every week on YouTube — subscribe
CloudKnowledge
cloudknowledge
ABOUT CLOUDKNOWLEDGE

Practical, Production-Grade Cloud & Identity Engineering

CloudKnowledge was founded to bridge the gap between theoretical cloud documentation and how Identity & Access Management (IAM), Zero Trust, and cloud infrastructure actually operate in enterprise production.

20+
Core Skills
175+
Hands-on Labs
100%
Real Tenant Configs
Free
Public Access
Our Mission

Demystifying Enterprise IAM

Enterprise identity is notoriously hard to learn because sandbox environments rarely mimic complex multi-tenant federation, hybrid sync, or conditional access ring deployments. Our mission is to provide reproducible, zero-fluff lab guides and scenario-based walkthroughs that any engineer can run, test, and master.

Our Vision

The Standard for Identity Training

We envision an industry standard where certification prep is not rote memorization of question dumps, but verified muscle memory gained by configuring policies, auditing Kerberos tickets, troubleshooting SAML assertions, and engineering Zero Trust boundaries.

WHAT WE COVER

Comprehensive Deep-Dives

🛡️

Microsoft Entra ID & Hybrid Identity

Active Directory Domain Services, Kerberos/NTLM, Entra Connect Cloud Sync, Pass-through Authentication, Password Hash Sync, and Hybrid Join.

⚡

Conditional Access & Zero Trust

Risk-based policies, authentication strengths, compliant device requirements, Continuous Access Evaluation (CAE), and break-glass accounts.

🔑

Protocols: SAML, OAuth, OIDC & SCIM

Enterprise application single sign-on, token claims transformation, automated user provisioning, API permissions, and app registrations.

☁️

Multi-Cloud IAM (AWS, Azure, GCP)

AWS IAM Identity Center, cross-account assume role policies, Azure RBAC with Managed Identities, and Google Cloud Workload Identity Federation.

👑

Privileged Identity Management (PIM)

Just-In-Time role activations, approval workflows, access reviews, break-glass policies, and audit logging.

📜

Industry Certifications

Practical preparation tracks for SC-300, SC-100, AZ-104, SAA-C03, and CISSP — paired with real scenario questions.

👨‍💻
Founder & Lead Architect

Shivam Tiwari

Identity & Access Management Architect and Microsoft Certified Identity Security Engineer with 7+ years of experience engineering Zero Trust architectures, managing 1000+ enterprise applications, and configuring 500+ SSO federations.

Ready to master identity?

Dive straight into our free hands-on labs or follow a curated career roadmap.

YouTube
CloudKnowledge channel

Watch every lab end to end — Entra ID, Conditional Access, PIM, hybrid identity and exam walkthroughs.

Watch on YouTube →