Session Abstract

Secrets expire. Certificates disappear into forgotten pipelines. Someone always leaves the company just before the authentication stops working. There has to be a better way. In this session, we will explore how to move from traditional app registrations and stored credentials to more secure, secretless authentication using managed identities, workload identity federation, and OpenID Connect. Using practical examples involving Azure, Microsoft 365, GitLab, GitHub, Azure Automation, and cross-tenant scenarios, we will look at what works, what does not, and what Microsoft means when it says “no secrets required.” We will compare the available identity patterns, follow the token flows, uncover the common traps, and discuss what to do when managed identity simply is not an option. Expect real-world architecture, practical demos, a few authentication horror stories, and a clear framework for choosing the right identity without creating another secret that somebody will inevitably forget to renew.

Rodrigo Pinto

With over 25 years in Software Engineering and Architecture, Rodrigo Pinto 🤠 is an Enterprise Architect and Microsoft 365 & Azure MVP at Perspective Dragon, leading innovation in the Modern Workplace. Known for blending vision with practical strategy, he designs forward-thinking solutions that empower organizations to transform. A passionate speaker and community advocate, Rodrigo has delivered sessions at premier Microsoft events since 2009, he delivers regular sessions such as Techdays, RoadtoSharePoint, Lightup SharePoint, Microsoft RoadShow, SharePoint Connections, SP24, Microsoft TechRefresh, MVP ShowCase, Thrive Conference, ESPC, CollabSummit, CloudSummit, CollabDays and online events. He founded both the SharePoint Portuguese User Group and CollabDays Portugal, staying true to his guiding principle , “By and For the Community.”