Lesson 3.3
MFA and delegated authentication
A second factor defeats stolen passwords. OAuth and OIDC hand identity to a provider — useful, and only if you validate what comes back.
4mIntermediate7,785 students
Sign in to watch this lesson
Browsing is free. Create an account to play videos and track your progress.
Overview
A second factor defeats stolen passwords. OAuth and OIDC hand identity to a provider — useful, and only if you validate what comes back.
What this lesson covers
- Add a second factor without wrecking usability
- Distinguish OAuth authorization from OIDC identity
- Validate tokens and claims on every request
This lesson sits in Authentication Done Right, part of Practical Web Security. It assumes what came before it and leads directly into the next lesson in the module.
In this lesson you will:
- Add a second factor without wrecking usability
- Distinguish OAuth authorization from OIDC identity
- Validate tokens and claims on every request