Platform overview and orientation guide
Day 00: quick tour—architecture, services, and how the pieces fit together.
See How Services Connect
This curriculum builds the mental model behind EmpowerNow — how IdP, PDP, Membership, CRUD, BFF, and AI components wire together in real integration scenarios. Use it alongside the full documentation for every detail.
🗺️ Your Learning Journey
Follow the path from foundations through core services, plugins, integration, and advanced components.
Prerequisites
Ensure you have these ready before starting
Docker Desktop Configuration
Configure these settings before starting Docker Desktop:
wsl --install in PowerShell as Administrator, then install Ubuntu 22.04+ from Microsoft Store.Project root: The folder where you cloned EmpowerNow (e.g. EmpowerNow). Replace <YourRepoRoot> in commands with this path (Windows: backslashes; macOS/Linux: forward slashes).
Serve Training Locally for Interactive Features
The interactive API testers require serving via HTTP (not file://). From your project root (e.g. EmpowerNow), run:
macOS/Linux:
cd <YourRepoRoot>/empowernow_training && python3 -m http.server 8888
Windows (PowerShell; use backslashes for <YourRepoRoot>):
cd <YourRepoRoot>\empowernow_training; python -m http.server 8888
Then open the URL your static server printed (for example http://localhost:8888 when using python -m http.server).
Week 1: Foundations & Environment Setup
Days 1–5 • Architecture, environment, containers, configuration, and running services
Platform Overview & Architecture
Understand the EmpowerNow ecosystem, service responsibilities, and how components interact in a zero-trust architecture.
Development Environment Setup
Clone repositories, configure hosts file, set up tools, and verify your development environment is ready.
Docker Compose & Profiles
Master Docker Compose profiles to run only what you need. Learn resource optimization and development workflows.
Configuration & Secrets Management
Understand the configuration architecture, Docker secrets, environment files, and OpenBao vault integration.
Exploring Running Services
Hands-on exploration of running services, health endpoints, logs, and debugging techniques.
Week 2: Core Services Deep Dive
Days 6-10 • Master IdP, PDP, and Membership
IdP Concepts: OIDC, OAuth2, JWT
Deep dive into OpenID Connect, OAuth 2.0 flows, JWT structure, and the IdP service architecture.
IdP Hands-On: Token Flows
Practice authentication flows, token exchange, PAT creation, and introspection using real endpoints.
PDP Concepts: AuthZEN & Policies
Understand AuthZEN 1.1 specification, policy hierarchies, PIPs, and how authorization decisions are made.
PDP Hands-On: Policy Evaluation
Create policies, test evaluations, understand decision contexts, and integrate PDP with your applications.
Membership Service Deep Dive
Master graph-based role management with Neo4j — hierarchies, delegations, identities, access reviews, and multi-tenant assignments.
Week 3: Plugin Development
Days 11-16 • Build custom plugins and extensions
Experience Platform Architecture
Understand the BFF-based plugin system, dynamic loading, SDK patterns, and security model.
Plugin Anatomy & Manifests
Learn plugin structure, manifest files, route contributions, permissions, and allowlists.
Building Your First Plugin - Part 1
Create a basic plugin with React components, using the Plugin SDK for API calls and authorization.
Building Your First Plugin - Part 2
Add advanced features: SSE subscriptions, WebSocket connections, telemetry, and error handling.
Plugin Registration & Security
Learn plugin signing, certificate management, upload process, and security verification.
DC-UI Kickstart Guide
Beginner-friendly introduction to DC-UI: systems, entities, inventories, admin events. Prep for Week 5 deep dive.
Week 4: Integration & Advanced Topics
Days 16-20 • Connect everything and go to production
CRUD Service & Workflows
Master the orchestration service, workflow engine, connectors, and approval flows.
Integrating IdP with Plugins
Connect your plugins with IdP for authentication, token management, and user context.
Integrating PDP with Plugins
Implement authorization in plugins using PDP evaluations, pre-gating, and context enrichment.
BFF & API Patterns
Learn dynamic routing, token policies, API proxying, and LLM proxy integration.
Deployment & Best Practices
Production deployment, monitoring, troubleshooting, and final project presentation.
Week 5: Advanced Components
Days 21-28 • MCP, AI, Agents, Security, and DataCollector
MCP & Tool Integration
Master Model Context Protocol, Loopback MCP for auto-generated tools, MCP Gateway, and JSON-RPC invocation.
AI & LLM Integration
Dynamic model routing, multi-provider support, budget enforcement, streaming, and token management.
Agent Lifecycle v2.0
Vault-backed credentials, Dynamic Client Registration, zero plaintext exposure, and multi-IdP support.
NowConnect & Hybrid
Secure on-prem connectivity, outbound-only tunneling, LDAP/AD access, and WebSocket multiplexing.
Security & Audit Trails
ARIA Seven Controls, tamper-evident receipts, hash chains, and comprehensive audit logging.
DataCollector Introduction
Master the EmpowerNow DataCollector system: architecture, core concepts, configuration hierarchy, and fundamental components.
DC-UI Deep Dive
Comprehensive exploration of DC-UI: inventories, entities explorer, analytics, admin events, and all configuration management features.
Debugging & Advanced Features
Complete debugging guide: expression editors, schema mapping debugging, health checks, and advanced DataCollector development patterns.