Skip to content

Start free trial

Lessons

Three minutes. One idea.

Each lesson has a short stepper, one thing to try and a three-question check.

Foundations 2

Foundations3 minWhat happens when you sign inFollow one sign-in from the app to AuthMantra and back.Foundations3 minWho you are, and what you may doAuthentication and authorization sound alike and fail differently.

Passwordless 3

Passwordless3 minWhy a passkey cannot be phishedA key pair, a challenge and one detail that stops fake sites.Passwordless3 minPick factors, watch the risk moveTick sign-in factors and see which attacks still work.Passwordless3 minStep-up before the risky clickStay signed in for routine work, re-check at the sensitive moment.

Provisioning 3

Provisioning3 minA leaver, end to endFrom the HR record to every connected app, and the log.Provisioning3 minBuild a SCIM PATCHFill a form, get the exact JSON a SCIM client would send.Provisioning3 minJoiner, mover, leaver: access that follows HRWalk one person through a career and see what access should exist.

Compliance 2

Compliance3 minDPDP: who is who in your identity dataFiduciary, principal and the consent record that ties them.Compliance3 minRead the log: who still had access?A leaver's last day, as a log. Find the line that matters.

Security operations 2

Security operations3 minTamper-evident logs: a hash chainEdit one entry and watch every later hash break.Security operations3 minVerify a signed webhookRecompute the HMAC yourself and see why a changed body fails.

Engineering 2

Engineering3 minDecode a token by handSplit a JWT, read the claims, and check what a relying party checks.Engineering3 minPKCE playgroundDerive a code challenge from a verifier and see why an attacker fails.