The very first step to securing any application is to shield it behind a solid authentication layer. Over the year, we have seen a lot of standards, libraries, and custom solutions to the apparently simple question: "who are you?". But depending on the application type, spanning from the classic MVC web to SPA, Mobile, desktop, or just a WebApi, the authentication flow is different and may be very tricky to implement. The solution is to completely get rid of the authentication, leveraging the power of a modern appliance such as KeyCloak, which can be federated with either your AD or the cloud providers. In this session, we will see how to fully leverage the power of KeyCloak using OpenId Connect in any .NET application and beyond.