Skip to content
UdemyASP.NETPaid courseAll LevelsCertificate

Modern Identity and Security for ASP.NET Core (Udemy.com)

Master ASP.NET Core Security: OAuth2, OpenID Connect, JWT, and Workload Identity for Modern Web APIs and AI Agents

Created by: Aref Karimi

Last updated May 2026

icon
What you will learn

  • Secure ASP.NET Core apps with OAuth2, OpenID Connect and JWT.
  • Implement Client Credentials, PKCE and On Behalf Of flows.
  • Manage secrets safely using Managed Identity and Workload Identity.
  • Validate and use access, ID and refresh tokens in real apps.
  • Design secure API, microservice and AI agent architectures.

How it compares

Against the other 116 rated Udemy courses in ASP.NET on CourseDuck:

  • Rating4.5 out of 5higher than 61% of them
  • Reviews2,673#26 of 117 by number of reviews
  • Length2.4 hoursshorter than 90% of them
  • Last updatedMay 2026more recently than 92% of them

icon
Course Description

Mastering modern application security is now essential for anyone building APIs, cloud services or AI driven applications. This course gives you a practical, hands on path to understanding authentication, authorisation and identity in ASP.NET Core.

You will learn how real world identity flows work, how to secure your APIs, how to handle users safely, and how to protect services talking to each other in distributed systems.

This course is designed for developers who want a strong, practical understanding of OAuth2, OpenID Connect, JWTs, PKCE, secrets management, delegated access and externalised policy-based authorisation.


What you will learn:


• The fundamentals of modern authentication and authorisation
• How identity actually flows through an application
• How JSON Web Tokens are structured, decoded and validated
• How to issue and inspect tokens using tools like Postman
• How to secure service to service communication with the Client Credentials Flow
• How to call protected APIs using C sharp and bearer tokens
• How to validate JWTs manually when you are not using ASP.NET Core middleware
• Why OpenID Connect is required for user authentication
• How ID tokens work and where they fit in the login process
• When to use OAuth and when to use OpenID Connect
• How the Authorisation Code Flow with PKCE protects mobile and browser based apps
• How to implement PKCE inside ASP.NET Core
• How to use refresh tokens safely
• How to call APIs on behalf of the signed in user
• Modern secrets management in the cloud
• How Managed Identity and Workload Identity remove the need for stored secrets
• How delegated authorisation works using the On Behalf Of Flow
• How to design upstream and downstream API security
• How to build policy based authorisation using PDP and PEP patterns

Throughout the corse you will work with Auth0 and Microsoft Entra ID to implement various authentication scenarios. We will also see how a modern Policy Decision Point pattern is implemented so easily using Amazon Verified Permissions.

Please bear in mind that in this third edition of the course,  ASP.NET Identity Framework is not thaught, as the modern applications do not implement their own identity systems.


By the end of this course, you will understand modern identity flows with absolute clarity and have the confidence to design and secure applications using current industry standards.


icon
Udemy Discount

The discount is applied through our link. Open the course from here and Udemy's current promotional price is applied at checkout on most courses, no code to type.

Some courses are excluded from Udemy's promotions. If the price does not drop, clear your browser cookies and use the button again.

icon
Instructor Details

Aref Karimi

Aref is a seasoned technology leader, strategist, and entrepreneur with over 20 years of experience driving innovation and growth in the tech industry. As a CTO and advisor, Aref has helped startups and enterprises align technology with business goals, delivering measurable results.


Aref is also a published author of several top-selling books, including:

- Tech Leadership for Profit: The CTO's Guide to Building a Thriving IT Company.

- Digital Transformation: From Bricks to Bits!

- The Vendor Management Playbook: Turn Your Vendor Relationships into a Competitive Advantage.

In addition to being an accomplished author, Aref is a passionate educator who teaches courses on Udemy and LinkedIn Learning. His courses, consistently the highest-rated and best-selling for over seven years, empower professionals to excel in software development, observability, DevOps, and leadership by providing practical insights and actionable strategies.

Join Aref's courses to gain real-world expertise and elevate your career!

icon
More courses by Aref Karimi

$11.99

$10.99

$59.99

$11.99

$10.99

$11.99

icon
More ASP.NET courses

$74.99

$69.99

$84.99

$14.99

$69.99

$10.99

icon
Reviews

4.5

2,673 ratings on Udemy

Select a bar to show only those reviews.Select the bar again to show every rating.

By Tu Phan Ngoc on 7/21/2026

Excellent course structure and modern content: - Up to date with modern .NET features and addresses relevant security scenarios in the context of rising AI technologies - I really enjoyed the teaching style, it prioritizes explaining system concepts and root problems over passive live-coding. Highly worth your time!

By Alexi Rostov on 5/23/2026

I strongly recommend this course to anyone who designs or develops IT systems. I learned to look at authorisation from a new perspective (policy decision point) and also I learned Auth0 without needing to buy an Auth0 course.

By George Parker on 5/1/2026

The flow of the topics is good and the explanation is great. It's got a balanced blend of theory and practice. I like it that there is no live coding, which can be very boring especially for those who are good and coding already and want to learn the design patterns and best practices.

By Herman Gerritsen on 6/25/2023

Nice course. Though material is from an older framework, it is good practise to port it to the latest dotnet framework. All examples still work after porting. Further more there is a few pieces where the video is audited without to much attention. Causing some duplication in one or two sections. Not really an issue but the dejavu experience keeps you focused!

By Ashton Layne on 3/17/2022

Overall a lot of good content that tells you how things work under the hood so you can make smarter decisions and have flexibility in your implementations. Great course for a mid-level developer looking to add an in depth understanding of Authentication/Authorization to your toolbox.

By Fernando Canto Hernandez on 1/14/2022

se agradece que muestre el codigo y se valla realizando en el momento. La explicacion es clara. En modulo 6 Mitigar Riesgos Seguridad es teoria es teoria en algunos casos pero se entiende y uno puede implementarlo Felicidades

By Tu Tri Huynh on 12/1/2020

The instructor is without doubt very knowledgeable, and I did get a solid introduction to the security aspects from the Mitigating Common Security Risks section. The course is not for beginners I'd say, and solid knowledge in ASP.NET Core is a requirement to be able to really appreciate a lot of the stuff. Also, this isn't a "what and why" course, but a more practical "how to" type, that shows what to do, but the learner will have to figure out the details and by themselves or through other sources to really understand what is going on under the hood. I had trouble appreciating the API security section, simply because a lot of methods where used that I simply did not understand fully. Also, some of the code for the MFACheck is not shown on screen, unlike everything before that, so unless the learner takes a look at the source code provided it'll get very confusing as to why things don't work like the instructor's MFA check. I guess I also have to mention, that quite a few questions have been left unanswered in the Q&A section for several months, which leads me to believe, that the instructor in large parts has lost interest for maintaining this course, which is a shame because there aren't many courses about ASP.NET Identity and the instructor does know a lot of things, so it would've been great if he kept updating, improving and building upon this very much needed and important topic.

By Murray Polson on 11/7/2020

Yes I am learning lots. It would also be good to do a little more code review after completing a section so that it reinforces understanding.

By Patrick Mashaba on 10/21/2020

Well presented course. I did gain a lot from this course that I need to practice. Well done!

By Sachin Kumar Sharma on 10/8/2020

good

By Faron Smordin on 10/2/2020

Really clear explanations. I feel like I completely understand the concepts so far. Great course!

By IT Equitybank Congo on 9/22/2020

L'explication est trs clair et concis, le formateur parle avec un accent audible et je suis satisfait !

Showing 12 of 56 reviews

icon
Quality Score

No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.

Content Quality
/
Video Quality
/
Qualified Instructor
/
Course Pace
/
Course Depth & Coverage
/

Overall Score : 90 / 100