Manohar Reddy Yandapalli

Open Source

Projects

AI-native IAM frameworks solving problems enterprises pay millions to fix. Click any project to see everything.

🔐

SmartAuth

AI-driven adaptive authentication

● Live

Replaces static rule-based authentication with a real-time XGBoost ML risk scoring engine built on ForgeRock AM 7.3. Every login scored in milliseconds — low risk allows, medium triggers step-up MFA, high blocks and fires an audit event to ForgeRock IDM 7.

ForgeRock AM 7.3ForgeRock IDM 7PythonXGBoostFastAPIReactJavaScriptForgeRock DS

Architecture

Login→ Collect signals→ Time anomaly→ Failed attempts→ Risk engine caller→ XGBoost model→ Allow / Step-up / Block→ IDM audit

What it does

→4 custom JavaScript scripted decision nodes in ForgeRock AM 7.3 — collects device fingerprint, browser, OS, IP address, login hour and failed attempts on every login

→Python FastAPI microservice running XGBoost classifier trained on 10,000 synthetic login scenarios — returns risk score in under 50ms

→Adaptive auth tree: low risk → passwordless, medium → step-up TOTP MFA, high → block and alert IDM automatically

→Every risk decision automatically audit logged to ForgeRock IDM 7 as a managed object — full governance trail with userId, score, action, timestamp

→Live React dashboard — reads from IDM REST API every 10 seconds, shows risk distribution bar chart, pie chart and colour-coded auth events table

Build phases

Phase 1

AM Nodes

4 custom scripted nodes

Phase 2

AI Engine

XGBoost risk model

Phase 3

IDM Layer

Audit + governance

Phase 4

Dashboard

React live UI

Key metrics

100%

ML model accuracy

10K

Training scenarios

<50ms

Risk score latency

Why it matters

→First open-source AI-adaptive authentication framework built on ForgeRock AM 7 — nothing publicly available like it exists

→Replaces static rule-based adaptive auth that every enterprise uses today with ML that continuously learns from patterns

→Combines ForgeRock engineering depth with AI/ML — a profile almost no IAM engineer has demonstrated publicly

🛡️

IdentityGuard

Autonomous NHI intelligence

🔨 Building

Autonomous Non-Human Identity intelligence framework on ForgeRock AM/IDM. Discovers every service account, OAuth2 client, API key and AI agent — profiles behaviour, detects anomalies using Isolation Forest ML, explains every decision in plain English via SHAP values, and auto-remediates with zero human intervention.

ForgeRock AM/IDMPythonIsolation ForestSHAPFastAPIReactOAuth2LDAP

The problem

→Every enterprise has 10x more non-human identities than human ones — service accounts, API keys, AI agents — but IAM tools were built for humans

→SolarWinds, Microsoft Exchange, Uber — all major breaches caused by a compromised non-human identity nobody was watching

→SailPoint, Saviynt and CyberArk charge £500k+ for partial NHI governance — no open-source working solution exists

Architecture

NHI discovery→ Behaviour profiler→ Isolation Forest→ SHAP explainability→ Autonomous decision→ IDM remediation→ Live dashboard

What it will do

→4 custom ForgeRock AM scripted nodes — discover, fingerprint and profile every NHI across AM, IDM and DS automatically

→Isolation Forest ML model — learns normal behaviour per NHI and flags deviations in real time without needing labelled attack data

→SHAP values produce plain English explanations: "This service account called 47 new endpoints in 10 minutes — 94% confidence compromised"

→Autonomous IDM remediation — revoke token, rotate credentials, quarantine NHI, alert team — zero human intervention required

→React dashboard — full NHI estate view with risk scores, anomaly timeline, remediation log and explainability panel

Build phases

Phase 1

AI Engine

Isolation Forest + SHAP

Phase 2

AM Nodes

NHI discovery + profile

Phase 3

Remediation

Auto-revoke + rotate

Phase 4

Dashboard

Live NHI estate view

Why it is unique

→First open-source framework combining NHI discovery + ML anomaly detection + explainable AI + autonomous remediation in one tool

→Platform agnostic — works with ForgeRock AM/IDM and any OAuth2-based IAM platform

→Targets the fastest-growing IAM spend category — NHI governance is the #1 unsolved problem in enterprise identity security in 2026

Technical

Skills

Enterprise IAM platforms, AI/ML development and identity security protocols.

🔐

IAM Platforms

ForgeRock AM 7ForgeRock IDM 7ForgeRock DSPingOne AICPingOne DaVinciOktaMicrosoft Entra IDSailPoint IIQSaviyntCyberArk

🤖

AI & Development

PythonFastAPIXGBoostscikit-learnIsolation ForestSHAPpandasJavaScriptReactREST APIsGit

🛡️

Protocols & Security

OAuth2OIDCSAML2FIDO2/WebAuthnLDAPMFASSOZero TrustAdaptive AuthNHI GovernanceRBACJML

Career

Experience

Enterprise IAM delivery across energy, rail and cloud transformation programmes in the UK and US.

IAM Engineer

Feb 2026 — Present

Hitachi Rail — London, UK

Office 365 and SharePoint Online migration — moving identities from GTS Entra tenant to Hitachi corporate Entra tenant. Okta integration using SAML/OIDC. Identity lifecycle management across the migration programme. Working with cross-functional teams across UK and Japan.

Microsoft Entra IDOktaSAMLOIDCO365 MigrationSharePoint Online

Ping IAM Developer

Feb 2024 — Feb 2026

Cloud IAM Ltd — Remote, UK

Migrated ForgeRock on-premise to PingOne Advanced Identity Cloud for Ameren (major US utility). Built authentication journeys, custom scripted nodes and DaVinci flows. Implemented federation integrations across enterprise applications using SAML2, OAuth2 and OIDC.

PingOne AICPingOne DaVinciForgeRockOAuth2OIDCSAML2

ForgeRock Developer

Dec 2022 — Feb 2024

Idnor Technologies LLP

Built enterprise SSO, MFA, OAuth2/OIDC and SAML2 solutions for Ameren using ForgeRock AM 6.5. Developed custom authentication trees and scripted decision nodes. Configured ForgeRock DS as the identity store across the enterprise environment.

ForgeRock AM 6.5ForgeRock IDMForgeRock DSSSOMFAJavaScript

Credentials

Education & Certifications

Academic and professional qualifications in identity security and cyber security.

🎓

MSc Cyber Security

University of Hertfordshire, UK

🏆

ForgeRock Identity Cloud

Certified Professional

🛡️

Ethical Hacking Essentials