0%

Explore Courses Defend What Matters

Your Bag

Identity & Access Management (IAM)

04 Cybersecurity Basics

Identity & Access Management (IAM)

Design authentication and authorisation that stands up to credential theft, the single most common way organisations get breached.

Levels
04
Skill Range
Beginner Expert
Track
Cybersecurity Basics
Lifetime Access
Identity & Access Management (IAM)
From 238CREDS

Stolen credentials open more doors than any exploit, which makes identity the control plane worth getting right. This course covers authentication factors and why some multi-factor implementations fail, single sign-on with SAML and OpenID Connect, and OAuth 2.0 flows explained in terms of what each one is actually for. You will design role-based and attribute-based access schemes, apply least privilege without grinding operations to a halt, and handle the awkward parts: service accounts, break-glass access, and joiner-mover-leaver processes that actually get followed. Directory services, privileged access management, and session handling round it out, with hands-on configuration against a lab identity provider.

Curriculum

Learning Path

Each level is enrolled separately. Work through them in order, or start at the level that matches your experience.

  1. Level 01

    Beginner

    238 CREDS

    Purpose

    Get authentication right, because stolen credentials open more doors than any exploit.

    Outcome

    You can deploy multi-factor authentication that resists the common bypasses.

    What You'll Learn
    • Compare knowledge, possession, and inherence factors on resistance to real attacks.
    • Configure multi-factor authentication and test it against a push fatigue attempt.
    • Explain why SMS codes and app prompts do not offer the same protection.
  2. Level 02

    Intermediate

    481 CREDS

    Purpose

    Understand federation, since single sign-on concentrates both convenience and risk in one place.

    Outcome

    You can implement single sign-on and explain what each token proves.

    What You'll Learn
    • Trace a SAML assertion and an OpenID Connect token through a full login.
    • Distinguish the OAuth 2.
    • 0 flows and state what each one is actually for.
    • Configure single sign-on against a lab identity provider and inspect the traffic.
  3. Level 03

    Advanced

    694 CREDS

    Purpose

    Design authorisation that stays least privilege as an organisation grows and roles multiply.

    Outcome

    You can design an access model that does not decay into everyone being an admin.

    What You'll Learn
    • Model the same access requirement with role-based and attribute-based schemes and compare them.
    • Apply least privilege without blocking legitimate work.
    • Handle service accounts and shared credentials, which are where least privilege usually collapses.
  4. Level 04

    Expert

    1,067 CREDS

    Purpose

    Govern privileged access and the joiner, mover, and leaver lifecycle that quietly grants it.

    Outcome

    You can prove who holds privileged access and that it was granted deliberately.

    What You'll Learn
    • Deploy privileged access management with session recording and time-bound elevation.
    • Design break-glass access that is usable in a crisis and alarming when used.
    • Build a joiner-mover-leaver process and audit it against actual account state.