SC-300: Identity and Access Administrator

SC-300 Course: Microsoft Identity and Access Administrator

The Microsoft Identity and Access Administrator course explores how to design, implement, and operate an organization's identity and access management systems using Azure AD. Learn how to manage tasks, such as providing secure access with authentication and authorization to business applications. You will also learn how to provide simple experiences and self-service management capabilities for all users. Finally, learn how to create adaptive access and governance for identity and access management solutions, ensuring you can troubleshoot, monitor, and report on your environment. The identity and access administrator can be a single person or a member of a larger team. Learn how this role collaborates with many other roles in the organization to drive strategic identity projects. The ultimate goal is to provide knowledge to modernize identity solutions, implement hybrid identity solutions, and implement identity governance.

Virtual course with certification exam included as a gift. Don't miss out on this opportunity! The exam is valued at €126 + VAT and is included at no additional cost.

Promotion valid until December 31, 2026. One-attempt exam available only in Virtual - Telelearning mode. Not applicable to Self-Learning mode.

Level: Intermediate - Product: Azure, Microsoft 365 - Role: Security Engineer

Course for

This course is designed for identity and access administrators who plan to take the associated certification exam or who perform identity and access management tasks in their daily work. This course would also be useful for an administrator or engineer who wants to specialize in providing identity solutions and access management systems for Azure-based solutions; playing an integral role in protecting an organization.

Course Objectives

• Design and Implement Identity and Access Management Systems: You will learn to use Microsoft Entra ID to manage identities and access across the organization.
  
• Provide Secure Access: You will configure authentication and authorization for business applications, ensuring secure and efficient access.
  
• Manage Identities and Access: You will manage the identity lifecycle for users, devices, Azure resources, and applications.
  
• Apply Zero Trust Principles: You will implement identity and access solutions based on Zero Trust principles to improve security.
  
• Monitor and Troubleshoot: You will learn to monitor, troubleshoot, and generate reports on identity and access management.
  
• Implement Hybrid Solutions: You will develop skills to implement hybrid identity solutions and identity governance.

SC-300 Training Elements

• Exploring Identity and Azure AD (16 Units)
• Implementing Initial Azure Active Directory Configuration (11 Units)
• Creating, Configuring, and Managing Identities (14 Units) 
• Implementing and Managing External Identities (16 Units)
• Implementing and Managing Hybrid Identity (11 Units)
• Protecting Azure Active Directory Users with Multi-Factor Authentication (6 Units)
• Managing User Authentication (12 Units)
• Planning, Implementing, and Managing Conditional Access (13 Units)
• Managing Azure AD Identity Protection (10 Units)
• Implementing Access Management for Azure Resources (11 Units)
• Planning and Designing Business Application Integration for SSO (10 Units)
• Implementing and Monitoring Business Application Integration for Single Sign-On (10 Units)
• Implementing Application Registration (11 Units)
• Planning and Implementing Entitlement Management (10 Units)
• Planning, Implementing, and Managing Access Reviews (9 Units)
• Planning and Implementing Privileged Access (11 Units)
• Monitoring and Maintaining Azure Active Directory (9 Units)

SC-300 Course Content: Microsoft Identity and Access Administrator

Module 1. Exploring Identities in Microsoft Entra ID
Lessons:
- Exploring Security
- Identity Management Concepts
- Authentication and Authorization
- Auditing and other Identity Concepts

Module 2. Implementing an Identity Management Solution
Lessons:
- Create, configure, and manage identities
- Configure and manage Microsoft Entra ID
- Implementing and managing external identities
- Implementing and managing hybrid identity
Labs:
Lab 00 - Lab Setup
Lab 01 - User Role Management
Lab 02: Working with tenant properties
Lab 03: Assigning licenses with group membership
Lab 04: Configuring external collaboration settings
Lab 05: Adding guest users to a directory
Lab 06: Adding a federated identity provider
Lab 07: Optional — Adding hybrid identity with Microsoft Entra Connect

Module 3. Implement an access and authentication management solution
Lessons: 
- Plan and implement Microsoft Entra multi-factor authentication (MFA)
- Manage user authentication
- Planning, implementing, and managing conditional access
- Managing Microsoft Entra ID Protection
- Implementing access management for Azure resources
Labs:
Lab 08: Enable multi-factor authentication
Lab 09: Enable Microsoft Entra self-service password reset
Lab 10: Microsoft Entra ID Authentication for Windows and Linux VMs
Lab 11: Assign Azure resource roles in Privileged Identity Management
Lab 12: Manage Microsoft Entra smart lockout settings
Lab 13: Implement and test a conditional access policy
Lab 14: Enable sign-in and user risk policies
Lab 15: Configure an MFA registration policy
Lab 16: Use Azure Key Vault for managed identities

Module 4. Implementing Access Management for Applications
Lessons:
What is an application?
Plan and design business application integration for Single Sign-On (SSO).
Implement and monitor business application integration
Implement application registrations
Labs: 
Lab 17: Discover Defender for Cloud Apps applications and apply restrictions
18: Defender for Cloud Apps access policies
19: Register an application
20: Implement access management for applications
21: Grant tenant-wide admin consent to an application

Module 5. Planning and Implementing an Identity Governance Strategy
Lessons:
Planning and implementing entitlement management
Plan, implement, and manage access reviews
Planning and implementing privileged access
Monitoring and maintaining Microsoft Entra ID
Labs:
Lab 22: Create and manage a resource catalog in Microsoft Entra entitlement management
Lab 23: Add terms of use and acceptance report
Lab 24: Manage the lifecycle of external users in Microsoft Entra Identity Governance settings
Lab 25: Create access reviews for internal and external users
Lab 26: Configure Privileged Identity Management for Microsoft Entra roles
Lab 27: Microsoft Sentinel Kusto queries for Microsoft Entra data sources
Lab 28: Monitor and manage security posture with identity security score

Prerequisites

Before attending this course, students should have knowledge of:

• Security best practices and industry security requirements, such as defense in depth, least privileged access, shared responsibility, and the Zero Trust model
• Familiarity with identity concepts such as authentication, authorization, and Active Directory
• Some experience implementing Azure workloads This course does not cover the basics of Azure administration, but rather the course content builds on that knowledge by adding security-specific information.
• Some experience with Windows and Linux operating systems and scripting languages is helpful but not required. The course labs may use PowerShell and CLI.

Language

• Course: English / Spanish
• Labs: English / Spanish

Associated Microsoft Certification: Identity and Access Administrator Associate

Microsoft Certified: Identity and Access Administrator Associate

Demonstrate the capabilities of Microsoft Entra ID to modernize identity solutions, implement hybrid solutions, and implement identity governance.

Level: Intermediate
Role: Security Engineer
Product: Azure
Subject: Security