Modern Identity and Security for ASP.NET Core (Udemy.com)
Master ASP.NET Core Security: OAuth2, OpenID Connect, JWT, and Workload Identity for Modern Web APIs and AI Agents
Created by: Aref Karimi
Last updated May 2026
What you will learn
- Secure ASP.NET Core apps with OAuth2, OpenID Connect and JWT.
- Implement Client Credentials, PKCE and On Behalf Of flows.
- Manage secrets safely using Managed Identity and Workload Identity.
- Validate and use access, ID and refresh tokens in real apps.
- Design secure API, microservice and AI agent architectures.
How it compares
Against the other 116 rated Udemy courses in ASP.NET on CourseDuck:
- Rating4.5 out of 5higher than 61% of them
- Reviews2,673#26 of 117 by number of reviews
- Length2.4 hoursshorter than 90% of them
- Last updatedMay 2026more recently than 92% of them
Course Description
Mastering modern application security is now essential for anyone building APIs, cloud services or AI driven applications. This course gives you a practical, hands on path to understanding authentication, authorisation and identity in ASP.NET Core.
You will learn how real world identity flows work, how to secure your APIs, how to handle users safely, and how to protect services talking to each other in distributed systems.
This course is designed for developers who want a strong, practical understanding of OAuth2, OpenID Connect, JWTs, PKCE, secrets management, delegated access and externalised policy-based authorisation.
What you will learn:
• The fundamentals of modern authentication and authorisation
• How identity actually flows through an application
• How JSON Web Tokens are structured, decoded and validated
• How to issue and inspect tokens using tools like Postman
• How to secure service to service communication with the Client Credentials Flow
• How to call protected APIs using C sharp and bearer tokens
• How to validate JWTs manually when you are not using ASP.NET Core middleware
• Why OpenID Connect is required for user authentication
• How ID tokens work and where they fit in the login process
• When to use OAuth and when to use OpenID Connect
• How the Authorisation Code Flow with PKCE protects mobile and browser based apps
• How to implement PKCE inside ASP.NET Core
• How to use refresh tokens safely
• How to call APIs on behalf of the signed in user
• Modern secrets management in the cloud
• How Managed Identity and Workload Identity remove the need for stored secrets
• How delegated authorisation works using the On Behalf Of Flow
• How to design upstream and downstream API security
• How to build policy based authorisation using PDP and PEP patterns
Throughout the corse you will work with Auth0 and Microsoft Entra ID to implement various authentication scenarios. We will also see how a modern Policy Decision Point pattern is implemented so easily using Amazon Verified Permissions.
Please bear in mind that in this third edition of the course, ASP.NET Identity Framework is not thaught, as the modern applications do not implement their own identity systems.
By the end of this course, you will understand modern identity flows with absolute clarity and have the confidence to design and secure applications using current industry standards.
Instructor Details
- 4.5 Rating
2,673 Reviews
Aref Karimi
Aref is a seasoned technology leader, strategist, and entrepreneur with over 20 years of experience driving innovation and growth in the tech industry. As a CTO and advisor, Aref has helped startups and enterprises align technology with business goals, delivering measurable results.
Aref is also a published author of several top-selling books, including:
- Tech Leadership for Profit: The CTO's Guide to Building a Thriving IT Company.
- Digital Transformation: From Bricks to Bits!
- The Vendor Management Playbook: Turn Your Vendor Relationships into a Competitive Advantage.
In addition to being an accomplished author, Aref is a passionate educator who teaches courses on Udemy and LinkedIn Learning. His courses, consistently the highest-rated and best-selling for over seven years, empower professionals to excel in software development, observability, DevOps, and leadership by providing practical insights and actionable strategies.
Join Aref's courses to gain real-world expertise and elevate your career!
More courses by Aref Karimi
Observability with Grafana, Prometheus,Loki, Alloy and Tempo (2026)
4.5 (6,261 Reviews)
Provider: Udemy
Time: 7.6h
$11.99
Unit Testing .NET Applications with xUnit .net v3 (2025)
4.5 (5,234 Reviews)
Provider: Udemy
Time: 3.7h
$10.99
Dependency Injection in .NET and ASP.NET Core (2025)
4.3 (3,402 Reviews)
Provider: Udemy
Time: 1.9h
$59.99
Atlassian Bamboo Data Center from Beginner to Advanced! (2024)
4.5 (2,055 Reviews)
Provider: Udemy
Time: 3.7h
$11.99
Microservices Interview Questions and Answers (2026)
4.6 (1,751 Reviews)
Provider: Udemy
Time: 2.4h
$10.99
Build Microservices with .NET & Amazon Web Services (2025)
4.3 (1,590 Reviews)
Provider: Udemy
Time: 9.1h
$11.99
More ASP.NET courses
Master ASP.NET Core Identity in .NET10: Auth & Authorization (2026)
4.8 (2,122 Reviews)
Provider: Udemy
Time: 7.1h
$74.99
Test Driven Development in ASP.NET Core - The Handbook (2025)
4.8 (506 Reviews)
Provider: Udemy
Time: 4.5h
$69.99
.NET Core MVC - The Complete Guide 2026 [E-commerce][MVC]
4.7 (20,841 Reviews)
Provider: Udemy
Time: 30.5h
$84.99
RESTful Web API in .NET Core - The Beginners Guide (.NET 10) (2026)
4.7 (7,998 Reviews)
Provider: Udemy
Time: 7h
$14.99
Getting Started with .NET Core Clean Architecture (2019)
4.7 (2,858 Reviews)
Provider: Udemy
Time: 4.1h
$10.99
Reviews
By Tu Phan Ngoc on 7/21/2026
Excellent course structure and modern content: - Up to date with modern .NET features and addresses relevant security scenarios in the context of rising AI technologies - I really enjoyed the teaching style, it prioritizes explaining system concepts and root problems over passive live-coding. Highly worth your time!
By Alexi Rostov on 5/23/2026
I strongly recommend this course to anyone who designs or develops IT systems. I learned to look at authorisation from a new perspective (policy decision point) and also I learned Auth0 without needing to buy an Auth0 course.
By George Parker on 5/1/2026
The flow of the topics is good and the explanation is great. It's got a balanced blend of theory and practice. I like it that there is no live coding, which can be very boring especially for those who are good and coding already and want to learn the design patterns and best practices.
By Herman Gerritsen on 6/25/2023
Nice course. Though material is from an older framework, it is good practise to port it to the latest dotnet framework. All examples still work after porting. Further more there is a few pieces where the video is audited without to much attention. Causing some duplication in one or two sections. Not really an issue but the dejavu experience keeps you focused!
By Ashton Layne on 3/17/2022
Overall a lot of good content that tells you how things work under the hood so you can make smarter decisions and have flexibility in your implementations. Great course for a mid-level developer looking to add an in depth understanding of Authentication/Authorization to your toolbox.
By Fernando Canto Hernandez on 1/14/2022
se agradece que muestre el codigo y se valla realizando en el momento. La explicacion es clara. En modulo 6 Mitigar Riesgos Seguridad es teoria es teoria en algunos casos pero se entiende y uno puede implementarlo Felicidades
By Tu Tri Huynh on 12/1/2020
The instructor is without doubt very knowledgeable, and I did get a solid introduction to the security aspects from the Mitigating Common Security Risks section. The course is not for beginners I'd say, and solid knowledge in ASP.NET Core is a requirement to be able to really appreciate a lot of the stuff. Also, this isn't a "what and why" course, but a more practical "how to" type, that shows what to do, but the learner will have to figure out the details and by themselves or through other sources to really understand what is going on under the hood. I had trouble appreciating the API security section, simply because a lot of methods where used that I simply did not understand fully. Also, some of the code for the MFACheck is not shown on screen, unlike everything before that, so unless the learner takes a look at the source code provided it'll get very confusing as to why things don't work like the instructor's MFA check. I guess I also have to mention, that quite a few questions have been left unanswered in the Q&A section for several months, which leads me to believe, that the instructor in large parts has lost interest for maintaining this course, which is a shame because there aren't many courses about ASP.NET Identity and the instructor does know a lot of things, so it would've been great if he kept updating, improving and building upon this very much needed and important topic.
By Murray Polson on 11/7/2020
Yes I am learning lots. It would also be good to do a little more code review after completing a section so that it reinforces understanding.
By Patrick Mashaba on 10/21/2020
Well presented course. I did gain a lot from this course that I need to practice. Well done!
By Sachin Kumar Sharma on 10/8/2020
good
By Faron Smordin on 10/2/2020
Really clear explanations. I feel like I completely understand the concepts so far. Great course!
By IT Equitybank Congo on 9/22/2020
L'explication est trs clair et concis, le formateur parle avec un accent audible et je suis satisfait !
Quality Score
No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.
Overall Score : 90 / 100








![.NET Core MVC - The Complete Guide 2026 [E-commerce][MVC]](/programming/asp-net/images/1844356_cba1_10.jpg?v=1789268164)



