Microsoft Security
SC-300T00 Microsoft Identity and Access Administrator
Take charge of identity and access in Microsoft Entra ID.
4 daysIntermediate19 modulesSC-300T00Microsoft Certified: Identity and Access Administrator Associate
About this course
Take charge of identity and access in Microsoft Entra ID. Over four days you will manage users, groups, devices and guest access, connect on-premises directories with Entra Connect, roll out multifactor and passwordless authentication, enforce Conditional Access, deploy Global Secure Access and integrate enterprise apps for single sign-on, preparing for the SC-300 exam and the Identity and Access Administrator Associate certification.
Curriculum
19 modules
- Explain the identity landscape
- Explore Zero Trust with identity
- Discuss identity as a control plane
- Explore why we have identity
- Define identity administration
- Contrast decentralized identity with central identity systems
- Discuss identity management solutions
- Explain Microsoft Entra Business to Business
- Compare Microsoft identity providers
- Define identity licensing
- Explore authentication
- Discuss authorization
- Explain auditing in identity
- Module assessment
- Configure company brand
- Configure and manage Microsoft Entra roles
- Configure delegation by using administrative units
- Analyze Microsoft Entra role permissions
- Configure and manage custom domains
- Configure tenant-wide setting
- Create, configure, and manage users
- Create, configure, and manage groups
- Configure and manage device registration
- Manage licenses
- Create custom security attributes
- Explore automatic user creation
- Module assessment
- Describe guest access and Business to Business accounts
- Manage external collaboration
- Invite external users - individually and in bulk
- Demo - manage guest users in Microsoft Entra ID
- Manage external user accounts in Microsoft Entra ID
- Manage external users in Microsoft 365 workloads
- Implement and manage Microsoft Entra Verified ID
- Configure identity providers
- Implement cross-tenant access controls
- Plan, design, and implement Microsoft Entra Connect
- Implement manage password hash synchronization (PHS)
- Implement manage pass-through authentication (PTA)
- Explore pass-through authentication and seamless single sign-on (SSO)
- Implement and manage federation
- Trouble-shoot synchronization errors
- Implement Microsoft Entra Connect Health
- Manage Microsoft Entra Health
- Module assessment
- What is Microsoft Entra multifactor authentication?
- Plan your multifactor authentication deployment
- Configure multifactor authentication methods
- Administer FIDO2 and passwordless authentication methods
- Explore Authenticator app and OATH tokens
- Implement an authentication solution based on Windows Hello for Business
- Deploy and manage password protection
- Configure smart lockout thresholds
- Implement Kerberos and certificate-based authentication in Microsoft Entra ID
- Configure Microsoft Entra user authentication for virtual machines
- Module assessment
- Plan security defaults
- Plan Conditional Access policies
- Implement Conditional Access policy controls and assignments
- Test and troubleshoot Conditional Access policies
- Implement application controls
- Implement session management and continuous access evaluation
- Microsoft Entra Conditional Access Optimization agent
- Module assessment
- Review identity protection basics
- Implement and manage user risk policy
- Monitor, investigate, and remediate elevated risky users
- Implement security for workload identities
- Explore Microsoft Defender for Identity
- Explore the Identity Risk Management Agent
- Module assessment
- Assign Azure roles
- Configure custom Azure roles
- Create and configure managed identities
- Access Azure resources with managed identities
- Analyze Azure role permissions
- Configure Azure Key Vault RBAC policies
- Retrieve objects from Azure Key Vault
- Explore Global Secure Access
- Deploy and configure Microsoft Entra Internet Access
- Deploy and configure Microsoft Entra Private Access
- Explore how to use the Dashboard to drive Global Secure Access
- Create remote networks for use with Global Secure Access
- Use Conditional Access with Global Secure Access
- Explore logs and monitoring options with Global Secure Access
- Module assessment
- Discover apps by using Microsoft Defender for Cloud Apps and Active Directory Federation Services app report
- Configure connectors to apps
- Design and implement app management roles
- Configure preintegrated gallery SaaS apps
- Implement and manage policies for OAuth apps
- Module Assessment
- Implement token customizations
- Implement and configure consent settings
- Integrate on-premises apps with Microsoft Entra application proxy
- Integrate custom SaaS apps for single sign-on
- Implement application-based user provisioning
- Monitor and audit access to Microsoft Entra integrated enterprise applications
- Create and manage application collections
- Plan your line of business application registration strategy
- Implement application registration
- Register an application
- Configure permission for an application
- Grant tenant-wide admin consent to applications
- Implement application authorization
- Manage and monitor application by using app governance
- Module assessment
- Plan for app registration
- Explore application objects and service principals
- Create app registrations
- Configure app authentication
- Configure API permissions
- Create app roles
- Module assessment
- Define access packages
- Configure entitlement management
- Configure and manage connected organizations
- Review per-user entitlements
- Module assessment
- Plan for access reviews
- Create access reviews for groups and apps
- Create and configure access reviews programmatically
- Monitor access review findings
- Automate access review management tasks
- Configure recurring access reviews
- Explore the Access Review Agent in Microsoft Entra
- Module assessment
- Define a privileged access strategy for administrative users
- Configure Privileged Identity Management for Azure resources
- Plan and configure Privileged Access Groups
- Analyze Privileged Identity Management audit history and reports
- Create and manage emergency access accounts
- Module assessment
- Analyze and investigate sign-in logs to troubleshoot access issues
- Review and monitor Microsoft Entra audit logs
- Export logs to third-party security information and event management system
- Analyze Microsoft Entra workbooks and reporting
- Monitor security posture with Identity Secure Score
- Module assessment
Who it's for
Identity, security and Azure administrators, ideally with SC-900 and AZ-104 level knowledge.
Before you start
- SC-900T00: Microsoft Security, Compliance, and Identity Fundamentals
- AZ-104T00 - Microsoft Azure Administrator
Prepares for
Related courses
More in Microsoft Security →FoundationSC-900T00
Microsoft Security, SC-900T00 Introduction to Microsoft Security, Compliance, and Identity, and Identity Fundamentals: SC-900 Exam Prep
Microsoft Security
View course →AdvancedSC-100T00
SC-100T00 Microsoft Cybersecurity Architect
Microsoft Security
View course →IntermediateSC-200
SC-200: Defend Against Cyberthreats with Microsoft's Security Operations Platform
Microsoft Security
View course →IntermediateSC-401
SC-401 Protect sensitive information with Microsoft Purview in the AI era
Microsoft Security
View course →IntermediateSC-5001
SC-5001 Configure SIEM security operations using Microsoft Sentinel
Microsoft Security
View course →IntermediateSC-5002
SC-5002 Secure Azure services and workloads with Microsoft Defender for Cloud regulatory compliance controls
Microsoft Security
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.