TN-Data Svenska
Glowing network of connected points

Getting Started: OpenID Connect

Learn OAuth 2 and OpenID Connect at your own pace. You follow the traffic and see how the protocols work, whatever language you write your code in.

Back to Workshops

Who Is This Course For?

This video course is for any developer who works with OpenID Connect, whether you use .NET, Java, Node.js or something else. The course is about the protocols, so it is not tied to one framework or library.

Course Agenda

  1. Course Overview Welcome; What You Will Learn; Who is the course for and prerequisites
  2. Getting Started Course Material; Installing Fiddler; Fiddler and HTTPS; Development Environment and HTTP Files; OpenSSL; The Demo Application; The Demo Environment
  3. Introduction to OAuth The Need for OAuth; Delegated Access; Introducing OAuth 2; Introducing OpenID Connect; OAuth Dance
  4. OpenID Provider The Need for an OpenID Provider; OpenID Provider Implementations; Federated Authentication; Exploring the OpenID Provider
  5. Implicit Flow OAuth and OpenID Connect Flows; Browser-based Applications; Backend-based Applications; Why the Implicit Flow Was Deprecated
  6. Tokens Token Introspection; Opaque Tokens; JSON Web Token; ID Token; Access Token
  7. Claims and Scopes Claims; Scopes; UserInfo Endpoint; Advanced Scopes and Claims
  8. Signing the Tokens Securing JWT Tokens; Unsecured Tokens; Signed Tokens; Symmetric Signed Tokens; Asymmetric Signed Tokens; RSA Signed Tokens; Elliptic Curve Signed Tokens
  9. Token Validation Key Distribution; Key Rotation; Signature Validation; Claims Validation
  10. Authorization Code Flow Introducing the Flow; From Code to Tokens; Introducing Refresh Tokens; Using Refresh Tokens; Observing OpenID Connect
  11. Securing the Flows The State Parameter; Advanced Uses of State; Trusting the Tokens with Nonce and at_hash; The need for PKCE; PKCE Explained
  12. Single Sign-On and Sign-Out Single Sign-On; Sign-Out; The Sign-Out Flow; Token Revocation
  13. Client Credentials Flow Introducing the Flow; Calling APIs; Comparing the Flows
  14. Course Conclusion OAuth 2.1 and Best Current Practices; OAuth and OpenID Connect Summary; Conclusion and Next Steps

Next Step

If you want to implement OpenID Connect in ASP.NET Core, my video course Getting Started: Authentication and Authorization in .NET is a good next step. It shows how ASP.NET Core handles sign-in, cookies and authorization under the hood.

Training for Your Team

Want a one-day introduction for your team instead? See my workshop Introduction to OpenID Connect and OAuth.

Get in touch

Contact