Skip to content

Commit

Permalink
Update admin section
Browse files Browse the repository at this point in the history
  • Loading branch information
larskaare authored Nov 23, 2023
1 parent 53b5878 commit ef44d82
Showing 1 changed file with 8 additions and 25 deletions.
33 changes: 8 additions & 25 deletions admin/readme.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Workshop - admin

Tasks to do before/after workshop. Current set-up is assuming a virtual workshop. This may evolve into physical and virtual versions.
Tasks to do before/after workshop. Current set-up is assuming a virtual workshop.

## Preparations

Expand Down Expand Up @@ -40,26 +40,13 @@ Tasks to do before/after workshop. Current set-up is assuming a virtual workshop
* Send reminder about cleaning up
* Remind about #appsec

## Format

2 + 2 days in separate weeks. All days build upon each others.

* Day 1 and 2 will have OAuth2 & OIDC focus. (1-11/12)
* Day 2 and 4 will have Network debug & Integration test focus

## Instructors

* Lars Kåre Skjørestad
* Stein Arne Sivertsen
* You?

### Invitation proposal

```text
Appsec Fundamentals - AuthN & AuthZ, new workshop is coming up!
We are preparing for a new run of the AuthN and AuthZ workshop. (Earlier known as the PAWA workshop)
We are preparing for a new run of the AuthN and AuthZ workshop.
The workshop is a hands-on experience where we explore protecting API's and Web apps, all in an Equinor Context. This is AppSec fundamental topics revolving around Authentication (AuthN) and Authorization (AuthZ). In the workshop participants will get to know key technologies such as OAuth2, OpenID Connect (OIDC) and Microsoft Entra ID. Our journey will take us from specification, to manual flow inspection, to coding, to using frameworks, to debugging and to testing - all for relevant Equinor scenarios. After the workshop the participants should have a pretty good understanding of the mechanics behind the scenes, good ideas on how to test without turning off authentication and authorization features, and not the least - how to debug and observe what happening on the wire.
Expand All @@ -68,16 +55,14 @@ Throughout the workshop we will discuss security issues, good practices and shar
- This is a technical hands-on workshop
- The workshop technical level is intermediate/advanced
- The workshop covers a lot of ground, the pace is usually perceived as high
- The workshop will be organized as 2+2-day event (total 4 days)
- The workshop will be organized as 2-day event
- We recommend that teams sing-up multiple participants.
- Participant must be able to join all 4 days.
- Maximum number of participants for each workshop is 20.
The workshop lives in the [appsec-fundamentals-authn-authz](https://github.com/equinor/appsec-fundamentals-authn-authz/) repo on Github. Head over to the repo to get a better idea for content, exercises and preparations. NB!! Only sign-up if you are able and committed to do the "pre-workshop preparation" ... prior to the workshop 😀
- Participant must be able to join both days.
- Maximum number of participants for each workshop is XX
The first 2 days will be on authentication and authorization. In the last two days we'll explore inspecting network traffic as well as how to fully automate an integration- and acceptance-test scenario with protection turned on.
The workshop lives in the [appsec-fundamentals-authn-authz]-cs(https://github.com/equinor/appsec-fundamentals-authn-authz-cs) repo on Github. Head over to the repo to get a better idea for content, exercises and preparations.
Dates: <2 first>, <2 last>
Dates:
Sign-up: link
Deadline for signing up is one week before the course start. This also goes for any cancellation.
Expand All @@ -99,12 +84,10 @@ Welcome to run #6 of the “AppSec Fundamentals Authn & Authz” workshop / cour
You will get calendar invites for the sessions. This workshop will be virtual – using MS Teams. Please accept/decline the calendar invites, this will help us in our planning!
Prior to joining the workshop, you need to do some preparations. These may take some time so we advise to take a look at them now 😊 Preparation are documented in the course repo: https://github.com/equinor/appsec-fundamentals-authn-authz/blob/main/Support/workshop_preparations.md. The preps are also divided into sections for all days, days 1-2 and days 3-4. Verify that the required tools/permissions work on your computer before the actual workshop!
Prior to joining the workshop, you need to do some preparations. These may take some time so we advise to take a look at them now 😊 Preparation are documented in the course repo: https://github.com/equinor/appsec-fundamentals-authn-authz-cs/blob/main/Support/workshop_preparations.md. Verify that the required tools/permissions work on your computer before the actual workshop!
The pace in the workshop is quite high. We are covering a lot of ground. Come prepared!
Test your laptop on a non Equinor WIFI – and get familiar with how to use this, with or without a VPN (proxy config etc).
Questions? Please use the workshop Slack channel and let’s help each other – #appsec-fundamentals-authn-authz
Looking forward to seeing you all!
Expand Down

0 comments on commit ef44d82

Please sign in to comment.