Extending Services Using OAuth2-Based Protocols

Course Overview

Enhancing Intelligent Access
0%
Improving Access Management Security
0%
Extending Services Using OAuth2-Based Protocols
0%
- Student Guide
- Workbook
- Virtual Exercise Environment
- Integrating Applications With OAuth2
- Discuss OAuth2 concepts
  0%
- Describe OAuth2 tokens and codes
  0%
- Describe refresh tokens, macaroons, and token modification
  0%
- Request OAuth2 access tokens with OAuth2 grant types
  0%
- Explain OAuth2 scopes and consent
  0%
- Configure OAuth2 in AM
  0%
- Demo: Configure and test the Device Code grant with AM as an OAuth2 authorization server
  0%
- Lab: Configure AM as an OAuth2 provider
- Lab: Configure AM with an OAuth2 client
- Lab: Test the OAuth2 Device Code grant type flow
- Integrating Applications With OIDC
- Introduce OIDC
  0%
- Describe OIDC tokens
  0%
- Explain OIDC scopes and claims
  0%
- List OIDC grant types
  0%
- Create and use an OIDC script
  0%
- Demo: Customise the OIDC claims script
  0%
- Lab: Create an OIDC claims script
- Demo: Configure and test the OIDC Authorization Code grant with AM as an OIDC Provider
- Lab: Register an OIDC client and configure the OAuth2 Provider settings
- Lab: Test the OIDC Authorization Code grant type flow
- Authenticating OAuth2 Clients and using mTLS in OAuth2 for PoP
- Examine OAuth2 client authentication
  0%
- Examine OAuth2 client authentication using JWT profiles
  0%
- Examine OAuth2 client authentication using mTLS
  0%
- Demo: Authenticate an OAuth2 client using mTLS
  0%
- Lab: Authenticate an OAuth2 client using mTLS
- Examine certificate-bound PoP when mTLS is configured
  0%
- Lab: Obtain a certificate-bound access token
- Transforming OAuth2 Tokens
- Describe OAuth2 token exchange
  0%
- Explain token exchange types and purpose for exchange
  0%
- Describe token scopes and claims
  0%
- Implement a token exchange impersonation pattern
  0%
- Demo: Configure AM for token exchange
  0%
- Implement a token exchange delegation pattern
  0%
- Configure token exchange in AM
  0%
- Demo: Examine the different token exchange flows
  0%
- Lab: Configure AM for token exchange
- Lab: Test token exchange flows
- Implementing Social Authentication
- Delegate registration and authentication to social media providers
  0%
- Demo: Examine social registration and authentication with Google
  0%
- Lab: Implement social registration and authentication with Google
- Knowledge Check
- Knowledge Check - Extending Services Using OAuth2-Based Protocols
Federating Across Entities Using SAML2
0%
Installing and Deploying AM
0%

Not yet accessed

Student Guide

Extending Services Using OAuth2-Based Protocols

This student guide contains your slides and instructor notes.

Access with a Pass

Not yet accessed

Workbook

Extending Services Using OAuth2-Based Protocols

Your workbook contains all your exercise instructions and should be used together with your exercise environment.

Access with a Pass

Not yet accessed

Virtual Exercise Environment

Extending Services Using OAuth2-Based Protocols

This brings you to your virtual exercise environment where you can complete your exercises using your workbook. Your lab exercises are chapter-based.

Access with a Pass

Integrating Applications With OAuth2

Discuss OAuth2 concepts

Discuss what OAuth2 is and the concepts about OAuth2 players (roles) participating in an OAuth2 ...

REST API access tokens OAuth2 integrations authroization

Describe OAuth2 tokens and codes

Describe the access token and authorization code that can be requested from and issued by OAuth2 ...

oauth2 ssl tls Access token authorization (1 more)

Describe refresh tokens, macaroons, and token modification

Describe refresh tokens, macaroons, and modification of access tokens with scripts.

oauth2 macaroons Access token authorization

Request OAuth2 access tokens with OAuth2 grant types

Request an access token by using the different OAuth2 grant type flows.

credentials oauth2 access tokens pkce authorization

Explain OAuth2 scopes and consent

Explain the role of OAuth2 scopes, dynamic scopes, and custom scopes.

oauth2 access tokens authorization

Configure OAuth2 in AM

Configure the OAuth2 provider and OAuth2 client profiles.

cts oidc endpoints configure macaroons (4 more)

Demo: Configure and test the Device Code grant with AM as an OAuth2 authorization server

Demonstrate how to configure an OAuth2 solution, where AM is the OAuth2 authorization server and a ...

oauth2 am configure authorization

Access with a Pass

Lab: Configure AM as an OAuth2 provider

Configure AM as an authorization server by creating the OAuth2 Provider service.

oauth2 configure lab exercise authorization AM

Access with a Pass

Lab: Configure AM with an OAuth2 client

Create an OAuth2 client profile for a smart TV device.

Access with a Pass

Lab: Test the OAuth2 Device Code grant type flow

Test the OAuth2 Device Code grant type flow by using REST APIs, provided as a Postman collection, ...

verification configure lab exercise device code access token

Integrating Applications With OIDC

Introduce OIDC

Introduce OIDC as an extension of OAuth2 with the addition of identity data.

oidc sso rest jtw

Describe OIDC tokens

Describe the format and purpose of OIDC ID tokens.

json oidc

Explain OIDC scopes and claims

Explain the relationship between OIDC scopes and claims, and how to map scope to its claims and the ...

claims scopes id token

List OIDC grant types

Describe the grant type flows defined by OIDC that are implemented in AM.

authorization code id token oidc pcke

Create and use an OIDC script

Create an OIDC script in AM, and configure the OIDC script to map the scopes and claims for OIDC ...

configure oidc id token

Demo: Customise the OIDC claims script

Demonstrate how to customize the default OIDC claim script.

attribute oidc user profile custom claim

Access with a Pass

Lab: Create an OIDC claims script

Create a new OIDC claims script with a custom scope and claim.

attribute lab exercise oidc user profile custom claim

Access with a Pass

Demo: Configure and test the OIDC Authorization Code grant with AM as an OIDC Provider

Demonstrate how to configure an OIDC solution, where AM is the OIDC Provider and a registered OIDC ...

openid configure lab exercise oidc client profile

Access with a Pass

Lab: Register an OIDC client and configure the OAuth2 Provider settings

openid configure lab exercise oidc client profile

Access with a Pass

Lab: Test the OIDC Authorization Code grant type flow

Test the OIDC Authorization Code grant type flow, using a web browser and a Postman collection, that ...

consent id token lab exercise access token mobile application

Authenticating OAuth2 Clients and using mTLS in OAuth2 for PoP

Examine OAuth2 client authentication

Examine the various methods confidential OAuth2 clients can use to authenticate to an authorization ...

client secret authentication OAuth2

Examine OAuth2 client authentication using JWT profiles

Examine how OAuth2 clients can authenticate to an authorization server using JWT profiles.

oauth2 jwt

Examine OAuth2 client authentication using mTLS

Examine how OAuth2 clients can authenticate to an authorization server using mTLS.

certificate oauth2 authenticate mtls pki

Demo: Authenticate an OAuth2 client using mTLS

Demonstrate how to authenticate an OAuth2 client using mTLS.

certificate authenticate mtls

Access with a Pass

Lab: Authenticate an OAuth2 client using mTLS

Authenticate an OAuth2 client using mTLS.

certificate lab exercise authenticate mtls

Examine certificate-bound PoP when mTLS is configured

Examine how a client can prove they own an access token using mTLS to bind their certificate to the ...

client oauth2 authentication access token mtls

Access with a Pass

Lab: Obtain a certificate-bound access token

Obtain a certificate-bound access token using mTLS and decode its content.

oauth2 lab exercise authentication access token mtls (1 more)

Transforming OAuth2 Tokens

Describe OAuth2 token exchange

Describe OAuth2 token exchange, the AM OAuth2 token exchange service, and compare the AM OAuth2 ...

sts token exchange security OAuth2

Explain token exchange types and purpose for exchange

Explain the types of token exchange and the purpose for why tokens are exchanged.

token types

Describe token scopes and claims

Describe the relationship between the resource, audience, and scopes, and introduce the token ...

scope token token restriction resource audiance

Implement a token exchange impersonation pattern

Describe the implementation of a token exchange impersonation code pattern.

impersonation expanded token restricted

Demo: Configure AM for token exchange

Demonstrate how to configure AM for token exchange and how to create a May Act script.

oauth2 token exchange

Implement a token exchange delegation pattern

Describe the implementation of a token exchange delegation code pattern.

delegation token

Configure token exchange in AM

Describe the key tasks needed to configure the token exchange settings in AM and then highlight the ...

token exchange

Demo: Examine the different token exchange flows

Demonstrate the different token exchange flows.

delegation impersonation access token subject tokens

Access with a Pass

Lab: Configure AM for token exchange

Configure the AM OAuth2 Provider to support OAuth2 Token Exchange, and create an application client ...

oauth2 token exchange lab exercise

Access with a Pass

Lab: Test token exchange flows

Use a Postman collection to test token exchange using different token exchange flows.

delegation impersonation lab exercise access token subject tokens

Implementing Social Authentication

Delegate registration and authentication to social media providers

Delegate registration and authentication to a social media provider.

oidc social registration oath2 social authentication

Demo: Examine social registration and authentication with Google

Demonstrate how to register and authenticate a user with their Google account.

social registration oath2 oidc social authentication

Access with a Pass

Lab: Implement social registration and authentication with Google

Implement social registration and authentication using Google as the social identity provider.

oidc social registration oath2 lab exercise social authentication

Knowledge Check

Access with a Pass

Knowledge Check - Extending Services Using OAuth2-Based Protocols

Complete this short video to check the knowledge you've learnt with us in the Extending Services ...

lab exercise

Next chapter: Federating Across Entities Using SAML2