Identity and Access Management

Lessons

1. 1

   What is IAM?

   Understand what identity and access management is and why controlling access matters.

   Beginner·35 min
2. 2

   Passwords and Authentication

   Learn how passwords are stored and hashed, and hash passwords hands-on with Python and bcrypt.

   Beginner·45 min
3. 3

   Multi-Factor Authentication

   Understand MFA types (TOTP, SMS, hardware keys) and how attackers bypass them.

   Beginner·35 min
4. 4

   Access Control Models

   Apply RBAC, ABAC, and the principle of least privilege to design a real access scheme.

   Intermediate·40 min
5. 5

   Directory Services and SSO

   Understand Active Directory, LDAP, Single Sign-On, OAuth, and OpenID Connect.

   Intermediate·40 min
6. 6

   Privileged Access Management

   Understand why privileged accounts are prime targets and how PAM tools protect them.

   Intermediate·35 min
7. 7

   Hands-on: Microsoft Entra ID

   Provision a sandbox tenant, assign least-privilege roles, enable MFA, and author a Conditional Access policy.

   Intermediate·50 min
8. 8

   Hands-on: AWS IAM Policies

   Write a least-privilege AWS IAM policy and verify it in the IAM Policy Simulator.

   Intermediate·50 min
9. 9

   OAuth 2.0 and OIDC Flows

   Read a real OAuth/OIDC flow in browser DevTools and identify common implementation vulnerabilities.

   Intermediate·45 min
10. 10

    Zero Trust Architecture

    Map an organisation's identity, device, network, application, and data posture against the CISA Zero Trust Maturity Model.

    Intermediate·40 min
11. 11

    IAM Resources and Next Steps

    Explore curated resources, certifications (Security+, SC-900), and practice platforms for IAM mastery.

    Beginner·30 min
12. 12

    IAM Job Readiness

    Translate IAM skills into a resume, portfolio plan, and interview prep for IAM analyst and engineer roles.

    Beginner·30 min