Understand the problem
Start with the question a technology or policy answers, the people and systems involved, and the trust between them.
The identity management academy.
Learn how identity works, one step at a time. Real explanations, diagrams you can follow, and a lab where you try each idea.
/learn/identity-security/phishing-and-relayed-sign-ins/
/learn/identity-security/phishing-and-relayed-sign-ins/
check your understanding
Identity is more than just a login. The lessons form a library in one section. Open any lesson in any order: each one shows where it sits and which lessons it builds on.
See how it works
Follow a protocol exchange, inspect a credential, or trace an access decision. Connect each step to the concept behind it.
Put it into practice
Work through examples, change a configuration, and investigate failures. Learn how to implement something and why it behaves the way it does.
A library in
one section
Sections hold chapters, and chapters hold lessons. Every lesson shows its place in the line under its title, and the sidebar shows the rest.
/learn/foundations/
Foundations
12 lessons in 1 chapters
- Identity fundamentals12 lessons
- What is Identity?4 min
- Establishing an identity2 min
- Proving control of an account4 min
- Deciding what someone can do3 min
- Clients, servers, and addresses6 min
- How applications communicate7 min
- Staying signed in5 min
- Trust across systems5 min
- Keys, encryption, and signatures6 min
- Protecting credentials and messages4 min
- Giving another application limited access3 min
- History of SSO5 min
- Foundations12 lessons
See how
it works
Follow a protocol exchange, inspect a credential, or trace an access decision. Diagrams follow standard notation and link back to the lesson that explains them.
A redirect asks the browser to make a new requestThe browser requests the album page at /albums/42. The photo service responds with 302 Found and Location: /sign-in. The browser makes a separate GET /sign-in request, and the service returns the sign-in page.
Capture
the Flag
Investigate fictional applications, exploit deliberate identity mistakes, then repair and retest them.
/lab/ctf/
/lab/ctf/
Hands-on
labs
Every lesson has a lab, 12 in all. You work in your own lab tenant, an identity service with its own users, clients and Audit, and each step you finish appears in the lab's activity as you go.
/lab/what-is-identity/
Identity
tools
Small tools for the everyday work of identity: reading tokens, building requests, checking metadata, certificates, provisioning messages and policies.
/tools/
start
here.
The overview explains who the lessons are for and how each one works. Reading the lessons needs no account.