SC-300: Identity and Access Administrator Associate | Microsoft Identity and Access Administrator

SC-300 Course: Microsoft Identity and Access Administrator

The Microsoft Identity and Access Administrator course explores how to design, implement, and operate an organization's identity and access management systems using Azure AD. Learn to manage tasks such as providing secure access to enterprise applications with authentication and authorization. You will also learn to provide seamless experiences and self-service management features for all users. Finally, learn to create adaptable access and governance for identity and access management solutions, ensuring you can troubleshoot, monitor, and report on your environment. The identity and access administrator can be a single person or a member of a larger team. Learn how this role collaborates with many other roles in the organization to drive strategic identity projects. The ultimate goal is to provide the knowledge to modernize identity solutions, implement hybrid identity solutions, and implement identity governance.

Virtual course with certification exam included as a gift. Don't miss this opportunity! The exam is valued at €126 + VAT and is included at no additional cost.

Promotion valid until December 31, 2026. One-attempt exam available only in Virtual - Distance Learning format.

Level: Intermediate  -  Product: Azure, Microsoft 365  -  Role: Security Engineer

Course aimed at 

This course is designed for identity and access administrators who plan to take the associated certification exam or who perform identity and access management tasks in their daily work. This course would also be useful for an administrator or engineer who wants to specialize in providing identity solutions and access management systems for Azure-based solutions; playing an integral role in protecting an organization.

Course objectives

• Design and implement identity and access management systems: You will learn to use Microsoft Entra ID to manage identities and access across the organization.
  
• Provide secure access: You will configure authentication and authorization for enterprise applications, ensuring secure and efficient access.
  
• Manage identities and access: You will manage the identity lifecycle for users, devices, Azure resources, and applications.
  
• Apply Zero Trust principles: You will implement identity and access solutions based on Zero Trust principles to improve security.
  
• Monitor and troubleshoot: You will learn to monitor, troubleshoot, and report on identity and access management.
  
• Implement hybrid solutions: You will develop skills to implement hybrid identity solutions and identity governance.

SC-300 Training Elements

• Identity and Azure AD Exploration (16 Units)
• Implementing the Initial Azure Active Directory Configuration (11 Units)
• Create, Configure, and Manage Identities (14 Units) 
• Implementing and Managing External Identities (16 Units)
• Implementing and Managing a Hybrid Identity (11 Units)
• Protecting Azure Active Directory Users with Multi-Factor Authentication (6 Units)
• Manage User Authentication (12 Units)
• Planning, Implementing, and Managing Conditional Access (13 Units)
• Managing Azure AD Identity Protection (10 Units)
• Implementing Access Management for Azure Resources (11 Units)
• Planning and Designing Enterprise Application Integration for SSO (10 Units)
• Implementing and Monitoring Enterprise Application Integration for Single Sign-On (10 Units)
• Implementing Application Registration (11 Units)
• Planning and Implementing Privileged Access Management (10 Units)
• Planning, Implementing, and Managing Access Reviews (9 Units)
• Planning and Implementing Privileged Access (11 Units)
• Monitoring and Maintaining Azure Active Directory (9 Units)

SC-300 Course Content: Microsoft Identity and Access Administrator

Module 1. Identity Exploration in Microsoft Entra ID
Lessons:
- Security Exploration
- Identity Management Concepts
- Authentication and Authorization
- Auditing and Other Identity Concepts

Module 2. Implementing an Identity Management Solution
Lessons:
- Create, Configure, and Manage Identities
- Configure and Manage Microsoft Entra ID
- Implementing and Managing External Identities
- Implementing and Managing a Hybrid Identity
Labs:
Lab 00 - Lab Configuration
Lab 01 - Managing User Roles
Lab 02: Working with Tenant Properties
Lab 03: Assigning Licenses with Group Membership
Lab 04: Configuring External Collaboration Values
Lab 05: Adding Guest Users to a Directory
Lab 06: Adding a Federated Identity Provider
Lab 07: Optional — Adding Hybrid Identity with Microsoft Entra Connect

Module 3. Implement an Access and Authentication Management Solution
Lessons: 
- Plan and Implement Microsoft Entra Multi-Factor Authentication (MFA)
- Manage User Authentication
- Planning, Implementing, and Managing Conditional Access
- Manage Microsoft Entra ID Protection
- Implementing Access Management for Azure Resources
Labs:
Lab 08: Enable Multi-Factor Authentication
Lab 09: Enable Microsoft Entra Self-Service Password Reset
Lab 10: Microsoft Entra ID Authentication for Windows and Linux Virtual Machines
Lab 11: Assign Azure Resource Roles in Privileged Identity Management
Lab 12: Manage Microsoft Entra Smart Lockout Values
Lab 13: Implement and Test a Conditional Access Policy
Lab 14: Enable User Sign-In and Risk Policies
Lab 15: Configure an MFA Registration Policy
Lab 16: Use Azure Key Vault for Managed Identities

Module 4. Implement Access Management for Applications
Lessons:
What is an application?
Plan and Design Enterprise Application Integration for Single Sign-On (SSO).
Implement and Monitor Enterprise Application Integration
Implement Application Registrations
Labs: 
Lab 17: Detect Defender for Cloud Apps Applications and Apply Restrictions
18: Defender for Cloud Apps Access Policies
19: Register an Application
20: Implement Access Management for Applications
21: Grant Admin Consent for the Entire Tenant to an Application

Module 5. Plan and Implement an Identity Governance Strategy
Lessons:
Planning and Implementing Privileged Access Management
Plan, Implement, and Manage Access Reviews
Planning and Implementing Privileged Access
Monitoring and Maintaining Microsoft Entra ID
Labs:
Lab 22: Create and Manage a Resource Catalog in Microsoft Entra Privileged Access Management
Lab 23: Add Terms of Use and the Acceptance Report
Lab 24: Manage the External User Lifecycle in Microsoft Entra Identity Governance Configuration
Lab 25: Create Access Reviews for Internal and External Users
Lab 26: Configure Privileged Identity Management for Microsoft Entra Roles
Lab 27: Microsoft Sentinel Kusto Queries for Microsoft Entra Data Sources
Lab 28: Monitor and Manage Security Posture with the Identity Security Score

Prerequisites

Before attending this course, students should have knowledge in:

• Security best practices and industry security requirements, such as defense in depth, least privilege access, shared responsibility, and the zero trust model
• Familiarity with identity concepts such as authentication, authorization, and Active Directory
• Some experience implementing Azure workloads. This course does not cover the basics of Azure management; rather, the course content builds on that knowledge by adding security-specific information.
• Some experience with Windows, Linux operating systems, and scripting languages is useful, but not required. The course labs may use PowerShell and the CLI.

Language

• Course: English / Spanish
• Labs: English / Spanish

Microsoft Associate Certification: Identity and Access Administrator Associate

Microsoft Certified: Identity and Access Administrator Associate

Demonstrate Microsoft Entra ID features to modernize identity solutions, implement hybrid solutions, and implement identity governance.

Level: Intermediate
Role: Security Engineer
Product: Azure
Subject: Security