Content:

Together we incrementally build an enterprise application that illustrates the following topics:

– Security Fundamentals:
... - Triple-A (Authentication, Authorization, Accounting)
... - HTTPS/TLS, Zero Trust Principles (mTLS)

– Introduction to Azure Entra ID:
... - Tenants, Users, Groups, Enterprise Apps, Service Principals
... - Management via Portal, Azure CLI, Microsoft Graph API, PowerShell

– Authentication Flows and Standards:
... - OAuth2 Flows (Auth Code + PKCE, Client Credentials, Device Code, On-Behalf-Of)
... - OIDC, SAML, WS-Federation

– MSAL Libraries in Practice:
... - MSAL for Java, .NET/C#, Node.js, Python
... - Interactive Login, Token Acquisition/Caching, Silent Renew, Single Sign-Out

– Protecting Applications and APIs:
... - JWT Token Validation, Scopes, Claims, App Roles
... - Backend-for-Frontend (BFF), Delegated vs Application Permissions

– Enterprise Features:
... - Multi-Factor Authentication (MFA), Conditional Access Policies
... - External Identities (B2B/B2C), Guest Users

– Infrastructure as Code & Automation:
... - Terraform AzureAD Provider (Users, Groups, App Regs)
... - Microsoft Graph API for programmatic Management

– Best Practices & Troubleshooting:
... - Secure Token Handling, Refresh Strategies
... - Error Handling, Logging, Auditing with Entra ID Reports

– Hands-on Labs in chosen Programming Language

You learn these concepts not only theoretically but implement them practically.

Disclaimer: The actual course content may vary from the above, depending on the trainer, implementation, duration and constellation of participants.

Whether we call it training, course, workshop or seminar, we want to pick up participants at their point and equip them with the necessary practical knowledge so that they can apply the technology directly after the training and deepen it independently.