QA Pro AcademyCybersecurity A-Z
Join free
← Back to catalogue
Nimbus Pay's customer identity rail of eight stations — register, authenticate, federate, sessions, authorize, protect, consent and scale — with the before and after at key stations: signup cut from eleven fields to two, lifting completion from 34% to 81%; MFA enrolment raised from 4% to 63% with passkeys by default; access tokens cut from 30 days to 10 minutes with rotated refresh tokens; 812 takeovers, 97% via password, answered with passkeys; every object checked for authorization; and 41.2 million customers migrated by re-wrapping at login instead of 8.2 million forced resets.
CY-SENIOR-044Senior Level · Customer IAM Architecture

Customer Identity & Access Management Architecture — The Customer Identity Rail

A senior architecture course that builds and defends the identity system tens of millions of customers sign in through. Work the customer identity rail - eight stations: Registration, Authentication, Federation, Sessions & Tokens, Authorization, Account Protection, Privacy & Consent, and Scale & Resilience - making passkeys the default, federating with OIDC/OAuth2 plus PKCE behind a BFF, authorizing per object and per consent, defending against credential stuffing and takeover, and running login as a resilient, migrated, multi-region tier-0 service. Four hands-on activities in every lesson.

16 hours8 chapters32 lessons225 activities8 labs

What you'll learn

  • Design customer registration and authentication for trust, low friction, and passkey-first assurance.
  • Architect standards-based federation and session/token lifecycles that resist theft and misuse.
  • Build fine-grained, consent-based authorization that closes BOLA systematically.
  • Layer defenses against credential stuffing, account takeover, and social-engineered recovery.

Price:৳10,000
Sign in to get access

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.