Know the flow. Trust the token. Secure the identity.
OAuth 2.x and OpenID Connect power authentication and authorization in modern applications – but misconfigured scopes, claims, and token flows can quickly become security risks. Introduction to OpenID Connect and OAuth gives you the practical understanding to get them right.
You will learn how authentication and authorization work, explore JWTs, claims, scopes, and token validation, and understand how tokens are secured through signing and encryption. You will also dive into essential modern flows and patterns, including Authorization Code Flow with PKCE, Client Credentials, Refresh Tokens, Single Sign-On, Backend for Frontend, and OAuth 2.1.
Through hands-on examples, you will gain vendor-neutral knowledge that you can apply to Duende IdentityServer, Keycloak, Entra ID, and other authorization services.
To whom is this training for?
This training is for you if you are a developer, tester, or software architect working with web applications, APIs, or backend systems and want to understand modern authentication and authorization beyond the surface level.
Whether you are new to OAuth 2.x and OpenID Connect or want to close gaps in your existing knowledge, you will gain practical skills you can put to work immediately. The training is especially valuable if you use or evaluate Duende IdentityServer, Entra ID, Keycloak, or other identity platforms and want vendor-neutral expertise that stays relevant across technologies.
If you want to design more secure solutions, troubleshoot identity issues faster, and make confident architectural decisions, this training is for you.
Additional information for participants
Participants should have a good understanding of the HTTP(S) protocol, including methods, headers, and cookies, as well as general familiarity with how the web works, REST APIs, and JSON. Some experience developing backend web solutions is also expected.
Training will be held in English.