OAuth & OpenID Connect
How modern delegated authorisation and single sign-on work, and the design and configuration choices that keep them secure.
Who it's for
Developers, architects and identity specialists working with SSO, APIs and application access.
Learning outcomes
- Explain the roles, tokens and flows in OAuth 2.0 and OpenID Connect
- Choose appropriate flows for web, mobile and service-to-service use
- Recognise common misconfigurations and token-handling mistakes
Curriculum
What the course covers.
- 01
Concepts and roles
Clients, resource owners, authorisation servers, scopes and consent.
- 02
Flows
Authorisation code with PKCE, client credentials and when to use which.
- 03
Tokens
Access, refresh and ID tokens: validation, lifetime and storage.
- 04
Secure configuration
Redirect handling, scope design and common implementation pitfalls.
Delivery options
Choose how you'd like to learn.
These are the formats we propose for this course. Availability confirmed on enquiry; availability and duration are always confirmed on enquiry.
On completion you receive Kagi course participation, not a third-party certification.
Live online
Real-time classes with a practitioner, in a small group, from wherever you work. Schedule agreed together.
Enquire — Live onlineFor teams
Delivered privately to your organisation, online or in person, with content tuned to your context.
Enquire — For teams
More in Identity & Data Security
Interested in OAuth & OIDC?
Tell us about your background and goals, and which format suits you. We'll reply personally.
Existing contact: info@symmaxa.com