HankoShell Academy

Learn by doing.

Explore HankoShell through practical learning paths: a problem to solve, a disposable environment and results you can verify.

For developers integrating IAM and the teams operating it. Start with the operator; the Academy will grow progressively.

First learning path

Keycloak as code

Create an OIDC client, change its callback, adopt an existing client and authenticate a machine with HankoShell Operator.

20 minutes · Browser · English walkthrough

A Kubernetes cluster and Keycloak prepared for you. No HankoShell account or local installation. A free Killercoda account is required.

Explore the learning path

Go further with the operator

Six independent labs to continue after the introduction. Each session prepares its own environment and checks concrete results.

Security policies

Apply a shared IAM profile, inspect MFA and session settings, then configure a broker and issuer.

20 min · English walkthrough

Open the lab

Applications and integration

Compare OIDC and SAML, verify claims and credential rotation, then deliver configuration to an authorized workload.

25 min · English walkthrough

Open the lab

Organizations and authorization

Build a hierarchy, assign roles and prove allowed, denied and revoked access to an API.

25 min · English walkthrough

Open the lab

Inventory and recovery

Discover existing configuration read-only, approve a configuration snapshot and verify recovery after a restart.

20 min · English walkthrough

Open the lab

Kubernetes identity

Authenticate a workload with a short-lived Kubernetes-projected token and verify rejection of a different identity.

25 min · English walkthrough

Open the lab

Approvals and prerequisites

Inspect lifecycle plans and execution refusals: unapproved images, missing Hub credentials and incomplete mesh identity.

Prerequisites and refusals

20 min · English walkthrough

Open the lab

Where the Academy goes next

These topics form the learning roadmap. Their labs are not available yet; each path will be published after complete verification.

Planned

Operate IAM with the Hub

Manage tenants, members and permissions in a control-plane environment dedicated to learning.

Planned

Integrate an application with the ADKs

Connect an application to SSO and integrate profile and organization screens into its own design system.

Planned

Customize the IAM experience

Build and publish a theme, then inspect login, profile and multi-factor authentication pages.

Planned

Delegation and advanced operations

Explore bounded delegation, managed upgrades and fleet operations through dedicated scenarios.