What is zero-trust-identity-security-entra-id?

This project is an end-to-end demonstration of Zero Trust identity security for organizations using cloud-based tools. Zero Trust is a security philosophy built on three principles stated in the README: verify every access request explicitly rather than trusting based on network location, use least privilege, meaning people get only the minimum access they need, and assume breach, meaning systems are designed as if attackers may already be inside. The implementation is built around Microsoft Entra ID, Microsoft's cloud identity and access management platform, and shows how its security tools work together. These include Conditional Access, which are rules that decide whether to allow, block, or require extra verification for a login, Privileged Identity Management, which lets administrators request elevated access only when needed, Identity Protection, which detects risky sign-ins, Identity Governance, which manages who has access to what over time, and external identity security for guest accounts. The project was created as a learning resource to bridge a gap: most existing documentation covers individual features in isolation, while this repository shows how the pieces connect operationally. That includes attack simulation, threat detection using Azure Monitor and Log Analytics with KQL (Kusto Query Language), and incident response workflows. The repository is organized across eight phases: architecture and threat modeling, identity foundation, authentication hardening, privileged access, identity protection, governance, external identities, and detection and response. The repository is presented as a portfolio and teaching project rather than a production security product, aimed at security engineers and IT administrators who want to see the individual Entra ID features working together in one coherent scenario instead of scattered across separate vendor documentation pages.