Customer Identity & Access Management Architecture — The Customer Identity Rail

A senior architecture course that builds and defends the identity system tens of millions of customers sign in through. Work the customer identity rail - eight stations: Registration, Authentication, Federation, Sessions & Tokens, Authorization, Account Protection, Privacy & Consent, and Scale & Resilience - making passkeys the default, federating with OIDC/OAuth2 plus PKCE behind a BFF, authorizing per object and per consent, defending against credential stuffing and takeover, and running login as a resilient, migrated, multi-region tier-0 service. Four hands-on activities in every lesson.

What you'll learn

• Design customer registration and authentication for trust, low friction, and passkey-first assurance.
• Architect standards-based federation and session/token lifecycles that resist theft and misuse.
• Build fine-grained, consent-based authorization that closes BOLA systematically.
• Layer defenses against credential stuffing, account takeover, and social-engineered recovery.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.