Skip to content
Module
Module 1 of 5Lesson 1 of 1~3 min

Course overview

This course is for Product Managers and founders who must decide who gets into their product and what each person can do there. From sessions to enterprise SSO, through two-factor authentication and roles, you specify the authentication and permissions of your own product step by step. You leave with its access matrix and its sign-in journeys written down.

Take this lesson: your first course is freeSee the full syllabus

Lesson objective

By the end of this overview, you will know what you will be able to specify (your product's authentication and permissions), the two deliverables you will produce and which four modules get you there.

Topics covered

  • authentication
  • permissions
  • access management
  • product specifications
  • Product Manager

Where it fits

Overview

What will I be able to specify by the end of this course, and in what order?

Lessons in this module

  1. Course overview (this lesson)

What you will learn in the course

This lesson is part of the course Design authentication and permissions for a product

  • Distinguish authentication, authorization and session, and specify session durations, sign-out and access revocation.
  • Specify password rules and account recovery journeys following current recommendations (NIST SP 800-63B-4, CNIL, OWASP).
  • Choose strong authentication factors (TOTP app, passkeys), plan their rollout and specify the fallback journeys.
  • Specify delegated sign-in (OpenID Connect, social login) and enterprise SSO (SAML, OIDC, SCIM provisioning) for a B2B product.
  • Design a permission model (roles, attributes, scope) as a roles × actions matrix, enforced on the server side according to least privilege.
  • Specify isolation between customers, invitations, the audit log, support access and account deletion.
  • Specify your product's complete sign-in journeys, with states and errors, and choose between building and using an authentication provider.

Related courses