Corporate training in the Gulf, London, Europe & Asia since 2015
Enquire now
SM-005

IT Systems: Identity and Access Management

Intensive 5-day course · English, Arabic & European languages

Security architects, IT planners and risk managers examine the principles of identity and access governance during this five-day course. Delegates study Public Key Infrastructure (PKI), authentication schemes, Single Sign-On (SSO) federation and authorization standards. Practical case studies illustrate identity architectures across cloud computing, banking, border control and healthcare services.

Classroom

Public courses in our cities

  • 19–23 Oct 2026Dubai£4,200 + VAT
  • 2–6 Nov 2026Riyadh£4,200 + VAT
  • 16–20 Nov 2026Istanbul£2,280 + VAT
  • 7–11 Dec 2026Rome£3,400 + VAT
  • 21–25 Dec 2026Doha£4,200 + VAT
  • 11–15 Jan 2027London£3,360 + VAT
Show 23 more dates
  • 25–29 Jan 2027Muscat£3,080 + VAT
  • 8–12 Feb 2027Munich£3,400 + VAT
  • 22–26 Feb 2027Casablanca£2,280 + VAT
  • 1–5 Mar 2027Amsterdam£3,400 + VAT
  • 15–19 Mar 2027Manama£3,080 + VAT
  • 5–9 Apr 2027Amman£3,400 + VAT
  • 19–23 Apr 2027Istanbul£2,280 + VAT
  • 3–7 May 2027Rome£3,400 + VAT
  • 17–21 May 2027Madrid£3,400 + VAT
  • 14–18 Jun 2027London£3,360 + VAT
  • 28 Jun – 2 Jul 2027Berlin£3,400 + VAT
  • 12–16 Jul 2027Munich£3,400 + VAT
  • 26–30 Jul 2027Milan£3,400 + VAT
  • 2–6 Aug 2027Amsterdam£3,400 + VAT
  • 16–20 Aug 2027Malaga£3,080 + VAT
  • 6–10 Sep 2027Sarajevo£3,400 + VAT
  • 20–24 Sep 2027Istanbul£2,280 + VAT
  • 4–8 Oct 2027Rome£3,400 + VAT
  • 18–22 Oct 2027Dubai£4,200 + VAT
  • 8–12 Nov 2027London£3,360 + VAT
  • 22–26 Nov 2027Riyadh£4,200 + VAT
  • 13–17 Dec 2027Munich£3,400 + VAT
  • 27–31 Dec 2027Doha£4,200 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Can't make these dates? We can run this course for your team on dates that suit you. Ask for custom dates · In-house options

Online (live)

With a trainer, on dates to suit your team

This course can be taught live online by a trainer, in English, Arabic or any European language, for one person or a whole team.

£1,850 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Special requests

Tailor this course

Pick what you want changed and we’ll come back with a proposal and price.

Special request

What would you like to change? (pick any)
or

Course overview

The expansion of connected networks and the Internet of Things links physical equipment directly to online services across banking, healthcare, telecommunications and government administration. This connectivity increases vulnerability to severe security threats, industrial espionage and unauthorized access to digital assets. Critical systems require identity assurance and access control to safeguard operational data.

This course presents the architecture framework needed for end-to-end identity and access management. Because modern enterprise environments integrate legacy software with distributed cloud workloads, security teams must deploy safeguards across every operational layer, including Public Key Infrastructure (PKI), One-Time Password (OTP) verification and federated Single Sign-On (SSO) systems. Practitioners evaluate these controls against common operational threats and configuration mistakes.

Case studies examine implementations in public and commercial environments, including electronic passports, national ID registers, mobile banking platforms, SSL server certificates and EMV payment card schemes.

Course objectives

By the end of the course, delegates will be able to:

  1. Explain the architectural framework of identity and access management alongside the risks of different deployment models
  2. Evaluate mechanisms for strong authentication, including One-Time Password (OTP) systems, digital certificates and device validation
  3. Analyse the operation of Public Key Infrastructure (PKI) and certification authorities in reducing organisational security risks
  4. Apply access control principles and federation standards including OAuth, OATH, SAML and OpenID to Single Sign-On (SSO) environments
  5. Construct identity management workflows using industry tools and case studies from payment schemes, border management and mobile banking

Target competencies

  • Information security management
  • Public key infrastructure implementation
  • Identification and authentication management
  • Identity Access Management (IAM)

Who should attend

This course suits:

  • IT strategic planners
  • Project managers
  • Security managers
  • Security architects
  • Risk managers

Training methodology

  • Interactive lectures and structured group discussions examine identity management principles and deployment options.
  • Delegates work through syndicate exercises, practical scenarios and role-play assignments based on live operational case studies.

Daily agenda

  1. Day 1

    Information security principles and cryptographic foundations

    • Overview of identity and access management functions
    • Information security attributes across enterprise systems
    • Confidentiality controls in digital networks
    • Integrity verification mechanisms
    • Availability requirements for service continuity
    • Non-repudiation principles in transactions
    • Accountability structures for administrative actions
    • Auditability standards for compliance verification
    • Symmetric and asymmetric cryptographic algorithms
    • Cryptographic hashing methods and digital signatures
    • Key generation, distribution and lifecycle management
  2. Day 2

    Public Key Infrastructure (PKI) architecture and certificate operations

    • Certification authority and registration authority structures
    • Digital certificate lifecycle management processes
    • Certificate classifications and functional usage patterns
    • Data encryption applications
    • Digital signature generation and validation
    • Client authentication certificates
    • SSL server certificate deployment
    • Attribute-based certificate structures
    • Operational case studies covering email security, mobile banking and document signing
  3. Day 3

    Identification methods and authentication mechanisms

    • Foundations of user identification, verification and authentication
    • Technical mechanisms for identity verification
    • One-Time Password (OTP) systems and token delivery
    • Biometric authentication techniques
    • Digital signature verification processes
    • Smartcard deployment and reader integration
    • Hardware and software security tokens
    • Mobile device authentication controls
    • Risk-based adaptive authentication rules
    • Step-up authentication triggers for sensitive transactions
    • Single Sign-On (SSO) architectures and federated identity models
    • Standards including OATH, OpenID, BrowserID and SAML
    • Architecture frameworks and commercial IAM software tools
    • Role of trusted computing in hardware-level identity assurance
    • Security vulnerabilities and threats associated with authentication methods
  4. Day 4

    Authorization models and access governance

    • Foundational principles of authorization in IT environments
    • Access control models including role-based and attribute-based schemes
    • OAuth protocol workflows and token authorization
    • Enterprise rights management and digital rights protection
    • Privileged access management for administrative credentials
    • Access governance, regulatory compliance and auditing
  5. Day 5

    Identity management frameworks and operational implementations

    • Enterprise architecture framework for identity management
    • Components of the identity and access management ecosystem
    • Integration of identity services within cloud computing environments
    • Real-world implementation case studies
    • Automated border control installations
    • Electronic passport inspection systems
    • National ID infrastructure programmes
    • Electronic banking authentication platforms
    • Digital healthcare record access frameworks
    • EMV payment card security specifications

Certificate

Every delegate who completes the course receives an ARUK Training Certificate of Attendance.

Frequently asked questions

How do I register?

Choose a date and city in the schedule and press Register, or send us an enquiry. Our team confirms your place and sends an invoice.

Are fees shown with VAT?

Fees are shown per delegate and exclude VAT, which is added to the invoice where applicable.

Can this course be delivered for our team only?

Yes. Any ARUK course can be delivered in-house at your premises, in a meeting room we book for you, or 1-to-1.

Is this course available online?

Yes. We run it live online with a trainer, on dates that suit your team, for £1,850 + VAT per delegate.

Is there a group discount?

Yes. 20% for 2 delegates, 35% for 3 delegates and 50% for 5 or more delegates on the same course.

Can the course be delivered in Arabic or another language?

Yes. Our courses can be delivered in English, Arabic or any European language, by a trainer who teaches in that language. Mention your preferred language when you register or enquire.

What certificate will I receive?

An ARUK Training Certificate of Attendance.

Related courses

Register

Key booking terms (read before you register)
  • The full fee is paid in advance, before the course starts.
  • Cancel in writing 30 or more days before the start date (45 for in-house) for a refund. Later than that, the full fee is payable.
  • No refund for non-attendance or partial attendance.
  • Places are for the named delegate only; another person cannot attend instead.
  • Moving to another date or city is only possible if ARUK agrees in writing.
  • Travel, accommodation and visas are your responsibility. A refused visa does not change the cancellation terms.

booking terms and conditions

Get a quotation