Enterprise OAuth 2.0 and OpenID Connect
OAuth2/OpenID Connect with Okta and Google IAM, JWT, Encryption, Signatures, openssl, Java Spring Boot and Angular
Lo que serás capaz de hacer
Enroll in this most comprehensive HIGHLY rated course on OAuth 2.0 and OpenID Connect and take your understanding of Authentication and Authorization to the next level. Regular updates with latest material, quick Instructor replies and excellent reviews. Recent Updates : Spring Boot examples updated to version 4.0.x and Java 25 . Angular Project Code updated to version 21.1.0 and Node Version 24.13.0 OAuth 2.0 is the industry-standard protocol for authorization. Almost all enterprises today are now using an Authorization Server to protect their REST APIs or have plans to use them in the near future. This course is designed to help Software developers and Application Architects fully understand the concepts behind OAuth/OpenID Connect (OIDC) and become an expert in integrating their code with any OAuth 2.0 Authorization Server . You will be able to design your applications using Microservices architecture and fully understand how security can be implemented using OAuth2/OIDC . The course will especially focus on enterprise applications deployed in the cloud environments right from the start. There are lectures devoted to Java Spring Boot and Angular 17 implementations for OAuth Client and Resource Server but the course is designed for a broader audience with knowledge of HTTP and Web Development. WHAT THE LEARNERS ARE SAYING: 5 STARS - Wow, what a journey . I usually lose focus when it comes to following a whole video course, but this one has been engaging, very interesting and extremely informative 5 STARS - Absolutely perfect . The speaking cadence, the samples, the knowledge on the topic and expertise of the author make this course really great. Very, very useful and clear. 20 out of 10 5 STARS - Amazing course. You will be zero to hero in OAuth2 after completing this course. Very simple and clean way of teaching. 5 STARS - Learnt so much, was using authorization & authentication all these years but really didn't think much about the importance of different kinds of auth. Best course on the internet 5 STARS - Truly fantastic course! 5 STARS - A well thought out and well designed content. Teaching style and approach is very good! Very useful! You will learn about OAuth by understanding it from many different perspectives. User's perspective by demonstrating a real world application using Shutterfly Architect's perspective by explaining the OAuth flows , Cloud deployments and Identity Brokers using diagrams Developer's perspective by using Postman to create and send messages to Okta and Google Authorization Servers Java Developer's perspective by writing our own Shutterfly application using a Java and Spring Boot 3.0 Application Angular Developer's perspective by writing our own Shutterfly application using Angular Front End Desktop Developer's perspective by understanding how to protect such applications using OpenID Connect Mobile Developer's perspective by understanding how to protect Mobile applications using OpenID Connect IoT (Internet Of Things) Developer's perspective by understanding how to protect IoT applications using OpenID Connect Tester's perspective by understanding how to test OAuth HTTP messages using Chrome and Postman Understand about Cryptographic Hashing, Encryption and Digital Signatures using openssl commands Understand about Identity And Access Management features of Okta Understand about JWT Tokens Understand Scope based Authorization versus Role Based Access Control (RBAC) You will learn about the various OAuth2 Grant Types, Access tokens, JWT tokens, Scopes and PKCE Extension . We will use the Google Authorization Server for explaining Social applications, Okta Authorization Server to explain Enterprise applications and in the process also understand subtle differences between Authorization Servers. One of the big goals of this course is to understand how OAuth/OIDC is used in an Enterprise and Cloud today. It's used along with SAML and LDAP together and so it's the goal of this course to explain these integrations end to end. For that reason, this course deliberately attempts to examine LDAP, SAML and Single Sign-on (SSO) before exploring OAuth2 . You will learn about Cloud deployments, Multi-cloud deployments as well as Identity Brokers . You will be able to get a 360 degree view of OAuth and OpenID Connect by exploring all possible Application integration points for different Architectures. REMEMBER… I'm so confident that you'll love this course that we're offering a FULL money-back guarantee for 30 days! So it's a complete no-brainer, sign up today with ZERO risk and EVERYTHING to gain.
- Fundamentals of OAuth 2.0 and OpenID Connect framework
- Deep dive into all OAuth Grant types using Postman
- How to integrate with Okta and Google OAuth 2.0 Authorization Servers
- How to write an OAuth 2.0 Client Application using Java Spring Boot 2.x and 3.x
- How to best use OAuth 2.0/OpenID in an Enterprise and Cloud Environments
- How to write an OAuth 2.0 Resource Server using Java Spring Boot 2.x and 3.x
Temario
UNIDAD 1 - Course Content · 4 leccionesUNIDAD 1 - Course Content
UNIDAD 1 - Course Content
- Why learn OAuth and OpenID Connect ?
- Course Content
- Explanation of Diagrams
- Cryptography Basics
UNIDAD 2 - Security Fundamentals - LDAP and SAML · 9 leccionesUNIDAD 2 - Security Fundamentals - LDAP and SAML
UNIDAD 2 - Security Fundamentals - LDAP and SAML
- Section Overview and Security Basics
- Authentication and Authorization
- LDAP
- Authentication, Authorization and LDAP
- SAML and Single Sign-On
- SAML Single Sign-On Flow
- Enterprise Application Security and Problem Usecases
- Social Applications and its problems
- SAML
UNIDAD 3 - OAuth 2.0 Fundamentals · 17 leccionesUNIDAD 3 - OAuth 2.0 Fundamentals
UNIDAD 3 - OAuth 2.0 Fundamentals
- OAuth 2.0 Definition
- OAuth Real World Demonstration
- Authorization in OAuth
- OAuth Roles
- OAuth Client Registration
- OAuth Opaque Access Tokens
- OAuth Structured Access Tokens (JWT)
- Roles, Tokens and Client Registration
- OAuth Scopes
- Notes on Access tokens and Scopes
- OAuth Endpoints
- Token Revocation Endpoint
- OAuth Grant Types, Refresh Tokens and Token Revocation
- OpenID Connect Scopes
- OAuth Grant Types Summary
- OAuth 2.0 Notes and Links
- OAuth Fundamentals
UNIDAD 4 - Grants Deep Dive using Google Authorization Server · 19 leccionesUNIDAD 4 - Grants Deep Dive using Google Authorization Server
UNIDAD 4 - Grants Deep Dive using Google Authorization Server
- Section Introduction
- Important note On Google Photos API
- Google Authorization Server : Client Registration
- Finding Google Endpoints
- Client Registration and Endpoints
- Postman Documentation and Installation
- Deep Dive : Authorization Code Grant Type
- Uploading Albums/Photos to Google Photos Library
- Deep Dive : Authorization Code Grant Type Continued
- Authorization Code Grant Type
- Deep Dive : PKCE Extension
- Experimentation with Google Drive Resource API
- Deep Dive : Implicit Grant Type
- Google Playground
- Grants Deep Dive with Google Authorization Server
- Google Coding Project : Project Explanation
- Google Coding Project : Code Walkthrough
- Google Coding Project : Debugging using Chrome
- Google Coding Project : Spring Boot "My Photos Client" setup
UNIDAD 5 - Grants Deep Dive using Okta Authorization Server · 17 leccionesUNIDAD 5 - Grants Deep Dive using Okta Authorization Server
UNIDAD 5 - Grants Deep Dive using Okta Authorization Server
- Okta Authorization Server
- Okta Change - Sign-up and Admin UI Changes
- Okta Setup
- Okta set up of Access Policy
- Custom Resource Server using Spring Boot
- FakeBookAPI Resource Server setup
- Deep Dive : Client Credentials Grant Type
- Client Credentials With Okta
- Deep Dive : Resource Owner Password Grant Type
- Other Okta Features
- Resource Owner Password Grant with Okta
- Policy setup for Resource Owner Password Grant
- Hands On Experiment with Okta Authorization Server using Postman
- Assignment Solution - Hands On Experiment with Okta
- Okta Coding Project : Project Explanation
- Okta Coding Project : Code Walkthrough
- Okta Coding project : Spring Boot "My Photos Client" setup
UNIDAD 6 - JWT and Client Authentication · 6 leccionesUNIDAD 6 - JWT and Client Authentication
UNIDAD 6 - JWT and Client Authentication
- Section Introduction
- JWT Token
- Client Authentication using Client Secret
- Client Authentication using JWT
- JWT and Client Authentication
- Client Authentication Documentation
UNIDAD 7 - OAuth 2.0 for the Enterprise and Cloud · 18 leccionesUNIDAD 7 - OAuth 2.0 for the Enterprise and Cloud
UNIDAD 7 - OAuth 2.0 for the Enterprise and Cloud
- Introduction
- Enterprise versus Social Applications
- Users, Groups and Scopes
- OAuth 2.0 Architecture for the Enterprise
- Login, Logout and Sessions
- User Mapping with Scopes
- RBAC - Role based Access Control
- RBAC - Creating Groups in Okta
- RBAC - Spring Boot Resource Server
- RBAC FakeBookAPI Resource Server setup
- OAuth 2.0 for the Enterprise
- OAuth 2.0 on the Cloud
- Revisit Enterprise Problem Usecases
- OAuth 2.0 and OpenID Connect
- Handling Multiple Authorization Servers
- Identity Brokers
- OAuth 2.0/OpenID Best Practices
- OAuth 2.0/Open ID for the Enterprise
UNIDAD 8 - Protecting Single Page Applications : Angular Coding Project · 8 leccionesUNIDAD 8 - Protecting Single Page Applications : Angular Coding Project
UNIDAD 8 - Protecting Single Page Applications : Angular Coding Project
- Angular Project Explanation
- Angular Project Setup
- Angular Code Walkthrough : Implicit flow using Google
- Note when running with Google
- Angular Code Walkthrough : Authorization Code with PKCE using Okta
- Note when running with Okta
- Final thoughts about Angular
- Protecting Single Page Applications (SPA)
UNIDAD 9 - Protecting Native Applications (Desktop, Mobile) · 5 leccionesUNIDAD 9 - Protecting Native Applications (Desktop, Mobile)
UNIDAD 9 - Protecting Native Applications (Desktop, Mobile)
- Native Applications Versus Web Applications
- Using OAuth in Desktop Applications
- Using OAuth in Mobile Applications
- RFC Link for Native Applications
- Protecting Native Applications
UNIDAD 10 - Protecting Applications on other Devices (TV, Watches etc.) · 4 leccionesUNIDAD 10 - Protecting Applications on other Devices (TV, Watches etc.)
UNIDAD 10 - Protecting Applications on other Devices (TV, Watches etc.)
- Devices with Limited Input Capabilities
- Device Code Grant Type
- RFC Link for OAuth 2.0 Device Authorization Grant
- Protecting Applications on Other Devices
UNIDAD 11 - Related Lectures and Perspectives · 3 leccionesUNIDAD 11 - Related Lectures and Perspectives
UNIDAD 11 - Related Lectures and Perspectives
- OAuth 2.0 Versus OpenID Connect (OIDC)
- Enterprise Versus OAuth Authorization
- The Idea of Delegated Authentication
UNIDAD 12 - Conclusion · 3 leccionesUNIDAD 12 - Conclusion
UNIDAD 12 - Conclusion
- Conclusion
- Documentation and References
- Bonus Lecture
UNIDAD 13 - Bonus - Cryptography Basics - Hashing, Encryption, Signatures · 14 leccionesUNIDAD 13 - Bonus - Cryptography Basics - Hashing, Encryption, Signatures
UNIDAD 13 - Bonus - Cryptography Basics - Hashing, Encryption, Signatures
- Section Introduction
- Cryptography Theory and Practice
- URL Encoding
- Base64 Encoding
- Cryptographic Hashing
- Symmetric Encryption
- Asymmetric Encryption
- Hybrid Encryption
- Digital Signatures
- openssl - Base64, URL Encoding and Hashing Demonstration
- openssl - Symmetric Encryption Demonstration
- openssl - Asymmetric Encryption Demonstration
- openssl - Hybrid Encryption Demonstration
- openssl - Digital Signature Demonstration
Tu certificado lo emite la SEP, no solo una plataforma
Al demostrar la competencia recibes un certificado emitido por la Secretaría de Educación Pública a través del Gobierno del Estado de México: un documento oficial que puedes presentar con confianza ante cualquier empleador o institución.
Tu certificado con INEC
- Lo emite la Secretaría de Educación Pública (SEP), a través del Gobierno del Estado de México
- Documento oficial con folio verificable en línea
- Lo otorga la Universidad Tecnológica Fidel Velázquez
Otras plataformas en línea
- Constancia privada emitida por la misma plataforma
- Solo acredita horas cursadas o asistencia
- Sin respaldo de una autoridad educativa
Tu itinerario, de la inscripción al certificado
- 1
Inscripción con pago único
Pagas $2,800 MXN una sola vez y entras de inmediato al curso.
- 2
Estudias a tu ritmo
13 unidades con videos, lecturas y actividades, disponibles 24/7 durante 12 meses.
- 3
Cuestionarios por unidad
17 cuestionarios para comprobar lo aprendido.
- 4
Certificado
Emitido por la SEP a través del Gobierno del Estado de México, con folio verificable.
Un certificado oficial de la SEP
- Emitido por la Secretaría de Educación Pública (SEP), a través del Gobierno del Estado de México. No es una constancia privada: es un documento oficial, y ese respaldo marca la diferencia frente a otras plataformas en línea.
- Contenido impartido por Viraj Shetty.
- Folio y QR verificables para compartirlo con quien te contrate.
Empieza hoy, a tu ritmo
Un solo pago y acceso inmediato al curso completo durante 12 meses.
- 13 unidades · 127 lecciones · 60 h
- 12 meses de acceso
- 17 cuestionarios de evaluación
- Certificado emitido por la SEP (Gob. del Estado de México) con folio verificable
Sobre tu inscripción
¿Cómo es el pago?
Un solo pago de $2,800 MXN. No hay mensualidades ni cargos recurrentes.
¿Cuánto tiempo tengo acceso?
12 meses desde tu inscripción, 24/7, para avanzar a tu ritmo.
¿Quién imparte el contenido?
El curso es impartido por Viraj Shetty; INEC gestiona tu inscripción, evaluación y certificado.
¿Qué pasa cuando vence mi acceso?
Puedes renovar tu cuenta tú mismo desde la plataforma, sin trámites ni esperas.


