Hackmanit IT security training courses offer you a high-quality mix of scientifically based content and practical, proven know-how. Our IT security training courses are appreciated by participants and companies from various industries, be it in the automotive industry, finance, critical infrastructures, public institutions, software development and many more.

OAuth 2.1 and OpenID Connect – Master Class

Your Benefits

Master the security best practices for OAuth and OpenID Connect with this interactive training.

  • Navigate the maze of numerous OAuth and OpenID Connect standards.
  • Realize complex scenarios using standardized features that increase security and maintainability.
  • Ensure future-proofness and interoperability in your implementations.
  • Avoid costly and time-consuming errors in design and implementation.

 

Possible Training Contents

We work with you to select the specific topics in advance in order to provide your team with the greatest possible benefit.

  • Advanced Use Cases
    • Single-Page Applications
    • API Chaining and Composition
    • OpenBanking
    • eHealth

  • Enhanced Countermeasures
    • Proof Key for Code Exchange (PKCE, RFC7636)
    • AS Issuer Identification (RFC9207)

  • Advanced Cyber Attacks
    • Issuer Confusion
    • Malicious Endpoint Attacks
    • IdP Confusion / Mix-Up

  • Sophisticated Security Features
    • Proof-of-Possession Tokens: mTLS (RFC8705), DPoP (RFC9449)
    • Strong Client Authentication: mTLS (RFC8705), JWT (RFC7523)
    • HTTP Message Signing

  • Improving Authentication and Authorization Requests
    • Pushed Authorization Requests (PAR, RFC9126)
    • Rich Authorization Requests (RAR, RFC9396)
    • JWT-Secured Authorization Request (JAR, RFC9101)

  • Specific Authentication and Authorization Requests
    • Cross-Device Flows: CIBA vs. Device Grant (RFC8628)
    • User-Managed Access (UMA) 2.0
    • Token Exchange
    • Federation

  • FAPI – High-Security Profiles
    • Overview of the FAPI Profile
    • FAPI 1.0 and FAPI 2.0
    • To which regulations can be complied with FAPI?

  • Strong Authentication
  • One Step Ahead of the Hackers
    • OAuth 2.1
    • OAuth Working Group Trends
    • Verifiable Credentials
    • Grant Negotiation and Authorization Protocol (GNAP) – The "successor" to OAuth?

 

Target Audience

This training is intended for everyone who wants to develop or operate complex scenarios in Identity and Access Management (IAM) with OAuth or OpenID Connect.

This course is helpful for, among others:

  • Administrators and integrators for identity and access management
  • Developers who want to use the highest industry standard in their implementation
  • Penetration testers and security analysts

To participate, technical knowledge of OAuth and OpenID Connect (e.g., the structure of the various protocol flows, messages and the ID token) is required.

This training builds on the Single Sign-On Security: OAuth and OpenID Connect training. We recommend that you first attend the Single Sign-On Security: OAuth and OpenID Connect training or both training courses in combination.

Training Days

The training is designed for 2 days, from 9:00 - 17:00, 8 hours each (including breaks).

 

Hands-On

Learn important approaches with our practical component that will give you a deep understanding of the methods used by hackers and defenders.

 

Certificate of Attendance

After completing the training, you will receive a personalized digital certificate from us.

 

Your Investment

1.490€ excl. VAT per person.

 


Booking Options

Customized training options for you or your team.

Whether fixed date, team online training or classroom training, we adapt to your wishes.
Contact us for the training you require to receive an individual and non-binding offer.

Send the registration form or your individual booking request directly to Dr. Christian Mainka:

 

Team Online Training

Book an online IT security training course on an individual date.
(at least 5 participants)

 

On-Site Training at Your Company

We will come to you on request and find an individual appointment for you and your team.

 

IT Security Consulting - Implementierung - Hackmanit

On-Site Training at Hackmanit

We take care of the training facilities on site in Bochum with individual desired dates.

 

 

Dr. Christian Mainka

Your Contact for This IT Security Training

Dr. Christian Mainka | Department Single Sign-On
christian.mainka@hackmanit.de

* All prices excl. VAT