Identity and Access Control for Modern Applications

Duration

5 Days

Upcoming Batch

05 October 2026 - 09 October 2026

Batch Options

8 hours & 4 hours

Language

English / Arabic

Course Overview

The “Identity and Access Control for Modern Applications” course from Microsoft provides a comprehensive overview of how to manage and secure identities and access within contemporary application environments. The course explores key concepts and practices related to identity management, including authentication, authorization, and the integration of identity services within modern applications. It delves into various identity solutions such as Azure Active Directory and other identity providers, emphasizing how to leverage these tools to ensure secure access to resources.

Participants will gain insights into implementing robust identity solutions that support both on-premises and cloud-based applications. The course covers techniques for managing user identities, configuring access controls, and ensuring compliance with security policies. By exploring real-world scenarios and hands-on labs, learners will acquire practical skills in designing and deploying identity and access control mechanisms tailored to the needs of modern applications. This course is designed for IT professionals, developers, and security administrators looking to enhance their knowledge and skills in identity management and access control within today’s dynamic application landscapes.

Schedule Dates

05 October 2026 - 09 October 2026

Identity and Access Control for Modern Applications

11 January 2027 - 15 January 2027

Identity and Access Control for Modern Applications

12 April 2027 - 16 April 2027

Identity and Access Control for Modern Applications

12 July 2027 - 16 July 2027

Identity and Access Control for Modern Applications

Course Content

• Identity & Access Control in ASP.NET
• ASP.NET Core Security Framework
• Claims-based Identity
• Cookie-based Authentication
• Social Logins (e.g. Google, Facebook, Twitter, etc.)
• OpenID Connect
• Data Protection
• Web Application Patterns
• Claims Transformation
• Account & Identity Linking
• Home Realm Discovery

• Securing APIs
• Architecture & Scenarios
• Token-based Authentication
• OAuth 2.0
• Token Lifetime Management
• OpenID Connect & OAuth 2.0 Combined
• Server-to-server Communication
• Native & Mobile Applications
• Custom Credentials & Token Requests

• Setup (Linux and Windows)
• Configuration
• Dependency Injection
• Services
• Customizations
• Claims & Tokens
• User Interface
• Storage System
• UI Workflows
• Logging & Eventing
• Hosting & Deployment (Linux and Windows)

Best practices
Security Patterns
Common Attacks and implementationVulnerability fixing
New release and security of today’s OAuth architecture
Hardening the front-channel with PKCE and signed authorization requests
Hardening the back-channel with asymmetric key based client authentication and mutualTLS
Hardening API calls with proof-of-possession access tokens
Scope parameter replacement with authorization request
Advanced high security profile for OAuth 2.0 and 2.1 with FAPI
Application Vulnerabilities (High level)
IIS and Nginx Hardening (High level)

FAQs

Participants should have a basic understanding of web development and security concepts. Familiarity with ASP.NET and ASP.NET Core is beneficial but not required.

By the end of the course, participants will be proficient in:

Designing and implementing secure authentication and authorization mechanisms.
Securing APIs and managing token lifetimes.
Configuring and customizing IdentityServer.
Applying advanced OAuth 2.0 security techniques and understanding SAML for SSO.

Yes, the course includes practical labs and exercises to help reinforce theoretical knowledge and develop hands-on skills in identity and access management.

To enroll in the Identity and Access Control for Modern Applications course, visit the CounselTrain website or contact our customer service team for more information and registration details.

For additional information or any questions regarding the course, you can reach out to CounselTrain’s customer service team via email or phone. Our representatives are available to assist you with any queries and provide further details about the course.

Upon enrollment, participants will receive access to all necessary training materials, including lecture notes, lab exercises, and additional resources through the CounselTrain learning platform.