DEV Community: Awad Yafai

[Boost]

Awad Yafai — Fri, 12 Dec 2025 21:23:09 +0000

Designing a Zero Trust Identity Architecture with Okta and SailPoint

Awad Yafai ・ Nov 20 '25

The 5 Identity Controls Every Modern Enterprise Is Missing in 2025

Awad Yafai — Fri, 05 Dec 2025 23:01:52 +0000

Production-ready SailPoint IdentityIQ / IdentityNow rule templates we ship to every client – now free for you

After leading identity programs for seven enterprises (15,000–110,000 identities), the same five gaps appear every single time.

Here are the exact five controls we make mandatory on Day 1 — complete with the SailPoint BeanShell and XML rules we drop into every tenant.

Real-Time Toxic Combination Blocker – SoD at request time, not just certification time
Dormant Account Auto-Disable After 25 Days – not 90**
90-Day Auto-Expiry on All High-Risk Entitlements
Just-In-Time Elevation with Automatic Rollback
Continuous Mini-Certification When Risk Score ≥ 750

All five rules + installation guide are now public and 100 % free:

https://github.com/awadyafai20-jpg/https-github.com-nexlify-public-sailpoint-modern-controls-2025/tree/main
We have run these exact rules in production for over 110,000 identities with zero false positives in 2024 and 2025.

Implement even two of them, and you will instantly jump from “compliant” to “best-in-class”.

Happy securing,

Awad Bin Khaled Yafai

Founder & CEO – Nexlify Innovations LLP

48-Hour Contractor Onboarding at Scale – The Exact SailPoint + Okta Workflow We Run in Production

Awad Yafai — Fri, 28 Nov 2025 11:08:37 +0000

Zero-touch provisioning and audit-proof offboarding for 500+ external users per month

Most enterprises still take 7–21 days to onboard contractors and consultants.

At Nexlify, we are committed to a 48-hour SLA for every client — and we have met it 99.7% of the time over the last 18 months.

Here is the exact automation flow we built using only SailPoint IdentityNow + Okta Workflows (no custom middleware, no extra licenses):

Contractor fills a 30-second Microsoft Form (start date + manager email)
Okta Workflow instantly creates the IdentityNow identity and triggers a self-service access catalog
SailPoint auto-provisions birthright roles based on contract type
Manager approves/rejects extra requests in < 4 hours (mobile push)
All access auto-expires on the exact contract end date — no manual cleanup ever

Real production numbers from one anonymized client

• Average onboarding time: 9.2 days → 41 hours

• Offboarding errors: 31 % → 0 %

• Contractor-related audit findings: 100 % eliminated

The complete workflow JSON, SailPoint population rules, and step-by-step setup guide are now public and free:

https://github.com/awadyafai20-jpg/contractor-48hr-onboarding

Clone it, test it in your sandbox, deploy it tomorrow — zero cost.

We run this exact flow for every enterprise client at Nexlify Innovations.

Stay secure,

Awad Bin Khaled Yafai
Founder & CEO – Nexlify Innovations LLP

Designing a Zero Trust Identity Architecture with Okta and SailPoint

Awad Yafai — Thu, 20 Nov 2025 01:00:56 +0000

How We Reduced Phishing Success from 22% to 0.4% in a Large Enterprise with Existing IAM Tools.

Over the last 24 months, we helped three enterprises (with 12,000–45,000 identities) reduce their phishing success rates from double digits to near zero — without purchasing a single new license.

Here is the exact architecture and the five controls we switched on in their existing Okta + SailPoint tenants:

Continuous Device Trust Scoring (instead of one-time MFA)
Impossible Travel + New Device Step-Up with automatic challenge
Risk-Based Conditional Access using SailPoint identity risk attributes
Real-time session revocation when the risk score jumps
Phishing-Resistant Authentication enforced for all privileged paths

Results across all three clients

Phishing click-to-compromise rate: 22 % → 0.4 %
Zero additional vendor spend
Full rollout in under 14 business days

The complete configuration guide and production rules are now public:

https://github.com/awadyafai20-jpg/zero-trust-2025

Clone, sandbox test, deploy today — we use this exact pattern for every new client at Nexlify Innovations Inc.

Stay safe,

Awad bin khaled Yafai

Founder & CEO – Nexlify Innovations LLP