Welcome
What will you learn in this course?
Who is the course for and prerequisites
Mastering: Azure for Developers
Familiar with Azure? Learn how to master it with this course.
About This Course
It's hardly a secret that cloud-based computing is everywhere these days. That also means that as a developer, you should know what it is and how to use it. This Mastering course is the third part in my Azure for Developers series, the follow-up to the Getting Started and Deep Dive courses. The two main topics in this course are security and automation. You can expect a deep dive into the many aspects of Entra ID, from securing machine-to-machine communication between Azure resources over securely logging in and out, right using Easy Auth and MSAL (Microsoft.Identity.Web), right up to workplace and external federation scenarios. After that, there's a full section dedicated to Azure Key Vault. Finally, you'll learn how to work with ARM and, mostly, Bicep, to automate your Azure infrastructure.
Course Curriculum
12h 10m 10 sections
Introduction
Getting Your Environment Ready and Creating the Infrastructure
Inspecting and Deploying the Demo Code
What IS Azure Security?
Delegating (C)IAM to Microsoft Entra ID
App Registrations and Enterprise Apps
Security Principals are Key
Section Recap
Introduction
The Application Service Principal
Creating App Registrations for Machine to Machine Communication
The Microsoft Identity Platform, MSAL and Microsoft.Identity.Web
Securing App Service to App Service Access (Frontend to API): Blocking Access
Securing App Service to App Service Access (Frontend to API): Regaining Access
Manually Acquiring a Token with ITokenAcquisition
Configuring and Using Token Content
Testing Entra ID Integration From Your Favorite Tool
Managing System-based Access Tokens
Publishing The Secured Components
Securing Frontend to Function Communication with Easy Auth: Setting Up Easy Auth
Securing Frontend to Function Communication with Easy Auth: Updating the Client
Delegating Token Logic to APIM
Delegated Permissions, Application Roles, Access Control Lists and Authorized Client Applications
Section Recap
Introduction
The Managed Identity
Managed Identities Beneath the Covers
Using a System-assigned Managed Identity to Secure Database Access
Using the DefaultAzureCredential for a Better Development Experience
Creating and Assigning Permissions to User-assigned Managed Identities
Using a User-assigned Managed Identity for Application Insights
Hybrid Approach: Securing Downstream Access in APIM with a User-based Managed Identity
Hybrid Approach: Securing Downstream Access in APIM with a User-based Managed Identity and Easy Auth
User-Assigned vs System-Assigned: What to Use When?
Section Recap
Introduction
Managing User Principals
User-based Authentication with Easy Auth
Microsoft.Identity.Web and Easy Auth
Authenticating with Easy Auth - Logging In
Authenticating with Easy Auth - Logging Out
Reading Out and Manipulating User Information with Easy Auth
Configuring Easy Auth for Accessing an API on Behalf of the User - The Basics
Configuring Easy Auth for Accessing an API on Behalf of the User - Configuring the Access Token
Accessing an API on Behalf of the User with Easy Auth
Gaining Long-lived Access with Easy Auth - The Basics
Gaining Long-lived Access with Easy Auth - Implementation
User-based Authentication with Microsoft.Identity.Web
Implementing User-based Authentication with Microsoft.Identity.Web - Logging In
Implementing User-based Authentication with Microsoft.Identity.Web - Logging Out
Accessing an API on Behalf of the User with Microsoft.Identity.Web
Gaining Long-lived Access with Microsoft.Identity.Web
How Single Sign-on Works on Entra ID
Configuring Token Lifetime with Conditional Access
Role-based Access Control in Azure: Azure RBAC, Entra RBAC, and Application Roles
Section Recap
Introduction
Introducing External Identities
B2B Collaboration with External Identities in a Workforce Tenant
Categorizing Users in a Workforce Tenant
Inviting Guest Users
Enabling a Self-service Sign-up/Sign-in User Flow
Creating and Using Custom Attributes
Supporting Social Providers
Section Recap
Introduction
Creating and Inspecting an External Tenant
Categorizing Users in an External Tenant
Enabling a Self-service Sign-up/Sign-in User Flow
Testing a Self-service Sign-up/Sign-in User Flow
Customizing Flows and Applications with Custom Authentication Extensions
Creating a Custom Authentication Extension Endpoint
Configuring and Linking Custom Authentication Extensions
Improving Custom Authentication Extension Security
Federating with an OpenID Connect Identity Provider
What About Native Authentication?
Section Recap
Introduction
Introducing Azure Key Vault
Provisioning a Key Vault
Managing Secrets, Keys, and Certificates
Using a Secret from Key Vault in a Web App
Loading a Connection String from Key Vault in an Azure Function
Using a Key from Key Vault For Encryption/Decryption
What About Using Certificates for Encryption/Decryption
Using a Certificate from Key Vault for Signing
Versioning Secrets
Rotating Secrets (and Keys)
Rotating Certificates
Auditing and Monitoring: Logs, Alerts, Access Control and Workbooks
Auditing and Monitoring: Best Practices
Section Recap
Introduction
Introduction and Fundamentals
What Tool Should You Use When?
ARM Template Basic Structure
Exporting and Deploying ARM Templates
Dry-running ARM Deployments
Section Recap
Introduction
Getting Our Environment Ready for Bicep
Inspecting a Bicep File
Dry-running Bicep Deployments
Working with Bicep Parameters, Variables, and Outputs: The Basics
Working with Bicep Parameters, Variables, and Outputs: Putting It All Together
Decompiling ARM Templates to Bicep
Working with Bicep Deployment Scope
Creating our Azure Functions Infrastructure
Understanding Dependencies
Modularization with Bicep Modules: The Basics
Modularization with Bicep Modules: Scopes and Structure
Using Parameter Files for Multiple Environments
Secrets Management with Key Vault References
Overall Best Practices
Section Recap
Meet Your Instructor
Kevin Dockx
© 2026 Dometrain. All rights reserved.
