IntegrAuth Academy
Identity, security and practical AI — free, from zero. Byte-sized lessons, real diagrams, hands-on labs, zero fluff. Two programs, each with its own exam and certificate.
English is hard? Your browser can translate this page into Tamil, Telugu, Kannada, Malayalam or Hindi. Tech words stay in English so you learn the real names.
How?
- Chrome on phone: ⋮ menu → Translate
- Chrome on computer: right-click → Translate to …
- Edge: the translate icon in the address bar
Start here: the login protocols
Other tracks told you what a login proves and why a token is safe. This track shows the how. You will see the real messages when Maya taps "Log in". They are a few short conversations.
Three logins you already know
🛍️ A shopping app says "Sign in with Google"
You do not make a new password. The shop sends you to Google. Google checks you. Then Google tells the shop who you are. This is OIDC.
🏢 The payroll app opens with no password
You signed in at the office portal this morning. The portal vouches for you to every work app. This is SAML.
📺 A TV app shows a short code
You type the code on your phone and log in there. The TV never sees your password. This is the device flow.
Each lesson turns one of these pictures into real messages. You can play the steps and break them.
What you will learn
A protocol is an agreed set of messages: who says what, in what order. The service that logs users in is the identity provider (IdP). The app that trusts it is the relying party. You will learn:
- OIDC login step by step — every message behind "Log in". OIDC is the modern way.
- SAML — SAML is the older company-login standard.
- Signing out across apps — one sign-out must end many sessions.
- Machine login — client credentials, for robots.
- Device flow — signing in a TV.
- Token exchange — honest delegation: acting for a user.
- JIT provisioning & account linking — first-time users.
- Federation trust — how an app finds a login service and the right JWKS.
- PAR, JAR & FAPI — locking down risky flows like banking.
- The big picture — the whole map.
- Cheat sheet & pop quiz — five scenarios.
How to use it
Take one lesson at a time. Your progress is saved in your browser. Most lessons end with a hands-on lab. You need no earlier knowledge, because each new word has a hover explanation.
You will name every redirect and POST behind "Log in". You will pick the right flow for a robot, a TV or a delegated call. The standards from earlier tracks (OAuth, OIDC, SAML, RFC 8693) become short conversations. Every message carries a token or a signed statement.
Start with OIDC login step by step.