---
title: "Getting Started: OpenID Connect"
description: "My 10.5-hour video course on Dometrain: how OAuth 2 and OpenID Connect work at the protocol level, with tokens, signing, flows and PKCE. Any platform."
url: https://tn-data.se/courses/getting-started-openid-connect/
type: page
lang: en
alternate: https://tn-data.se/sv/kurser/kom-igang-med-openid-connect.md
site: https://tn-data.se/
---

# Getting Started: OpenID Connect

> Learn OAuth 2 and OpenID Connect at your own pace. You follow the traffic and see how the protocols work, whatever language you write your code in.

[Back to Workshops](https://tn-data.se/courses/)

## Who Is This Course For?

This video course is for any developer who works with OpenID Connect, whether you use .NET, Java, Node.js or something else. The course is about the protocols, so it is not tied to one framework or library.

## Course Agenda

1. **Course Overview** Welcome; What You Will Learn; Who is the course for and prerequisites
2. **Getting Started** Course Material; Installing Fiddler; Fiddler and HTTPS; Development Environment and HTTP Files; OpenSSL; The Demo Application; The Demo Environment
3. **Introduction to OAuth** The Need for OAuth; Delegated Access; Introducing OAuth 2; Introducing OpenID Connect; OAuth Dance
4. **OpenID Provider** The Need for an OpenID Provider; OpenID Provider Implementations; Federated Authentication; Exploring the OpenID Provider
5. **Implicit Flow** OAuth and OpenID Connect Flows; Browser-based Applications; Backend-based Applications; Why the Implicit Flow Was Deprecated
6. **Tokens** Token Introspection; Opaque Tokens; JSON Web Token; ID Token; Access Token
7. **Claims and Scopes** Claims; Scopes; UserInfo Endpoint; Advanced Scopes and Claims
8. **Signing the Tokens** Securing JWT Tokens; Unsecured Tokens; Signed Tokens; Symmetric Signed Tokens; Asymmetric Signed Tokens; RSA Signed Tokens; Elliptic Curve Signed Tokens
9. **Token Validation** Key Distribution; Key Rotation; Signature Validation; Claims Validation
10. **Authorization Code Flow** Introducing the Flow; From Code to Tokens; Introducing Refresh Tokens; Using Refresh Tokens; Observing OpenID Connect
11. **Securing the Flows** The State Parameter; Advanced Uses of State; Trusting the Tokens with Nonce and at_hash; The need for PKCE; PKCE Explained
12. **Single Sign-On and Sign-Out** Single Sign-On; Sign-Out; The Sign-Out Flow; Token Revocation
13. **Client Credentials Flow** Introducing the Flow; Calling APIs; Comparing the Flows
14. **Course Conclusion** OAuth 2.1 and Best Current Practices; OAuth and OpenID Connect Summary; Conclusion and Next Steps

## Next Step

If you want to implement OpenID Connect in ASP.NET Core, my video course [Getting Started: Authentication and Authorization in .NET](https://tn-data.se/courses/getting-started-authentication-and-authorization-in-dotnet/) is a good next step. It shows how ASP.NET Core handles sign-in, cookies and authorization under the hood.

[![Getting Started: OpenID Connect, the course cover on Dometrain](https://tn-data.se/_astro/getting-started-openid-connect-thumbnail.BKepI2R0_Z10O631.webp)](https://dometrain.com/course/getting-started-openid-connect/?ref=tore-nestenius&promo=tndata-website)

**Length**  
Over 10 hours

**Lessons**  
75 lessons in 14 chapters

**Level**  
Getting Started

**Published**  
October 2026

**Where**  
On demand, on Dometrain

[Watch on Dometrain](https://dometrain.com/course/getting-started-openid-connect/?ref=tore-nestenius&promo=tndata-website)

## Training for Your Team

Want a one-day introduction for your team instead? See my workshop [Introduction to OpenID Connect and OAuth](https://tn-data.se/courses/introduction-to-openid-connect-and-oauth/).