Reviews 5,0
Reviews 5,0
SC-300 Microsoft Identity and Access Administrator
Access management is a core pillar of secure IT systems. Organizations that systematically control identities, roles, and permissions in Microsoft environments build the foundation for stable, compliant cloud and hybrid architectures.
Key topics
- Building and managing identities with Microsoft Entra ID.
- Assigning roles, permissions, and group policies effectively.
- Configuring authentication methods and implementing Conditional Access.
- Leveraging identity protection, risk detection, and governance features.
- Securing hybrid environments across on-premises and cloud services.
Prerequisite
Knowledge of IT infrastructures, cloud services, and fundamental security concepts is required.
Target group
Suitable for administrators and IT professionals taking on security responsibilities focused on identity and access management.
A solid understanding of identity management enables more precise access control and strengthens security architecture in dynamic IT landscapes over the long term.
Course content
Use Microsoft Entra ID
- Explanation of the identity landscape
- Exploring Zero Trust and Identity
- Viewing Identity as a Control Layer
- Examine reasons for identity
- Definition of identity management
- Comparing decentralized and centralized identity
- Discussion of identity management solutions
- Explaining Microsoft Entra Business to Business
- Compare Microsoft identity providers
- Definition of identity licensing
- Exploring authentication
- Discussion of authorization
- Explaining auditing in identity
Set up Microsoft Entra ID
- Set up corporate brand
- Manage Microsoft Entra roles
- Set up delegation through administrative units
- Analyze Microsoft Entra role permissions
- Set up and manage custom domains
- Configure tenant-wide settings
Manage identities
- Create, configure, and manage users
- Create, configure, and manage groups
- Configure and manage device registration
- Manage licenses
- Create security attributes
- Investigate automatic user creation
Integration of external identities
- Manage guest access and B2B accounts
- Manage external collaboration
- Invite external users (individually or in groups)
- Manage guest users in Microsoft Entra ID
- Manage external user accounts in Microsoft Entra ID
- Manage external users in Microsoft 365
- Set up and manage Microsoft Entra Verified ID
- Configure identity providers
- Implement cross-tenant access controls
Establishment of hybrid identities
- Planning, design, and implementation of Microsoft Entra Connect
- Management of password hash synchronization (PHS)
- Pass-through authentication (PTA) management
- Demo of pass-through authentication and single sign-on (SSO)
- Implementation and management of federation
- Troubleshooting synchronization errors
- Implementing Microsoft Entra Connect Health
- Managing Microsoft Entra Health
Enable multi-factor authentication
- Multiple security levels provide protection.
- Plan to use multi-factor authentication.
- Configure authentication methods.
User authentication
- Management of FIDO2 and passwordless login methods
- Getting to know authenticator apps and OATH tokens
- Implementing Windows Hello for Business as an authentication solution
- Setting up and managing password protection
- Configuring thresholds for smart locks
- Implementing Kerberos and certificate-based authentication
- Configuring user authentication
Access control management
- Set security requirements
- Plan policies for conditional access
- Set up controls and assignments for conditional access
- Test and troubleshoot conditional access policy errors
- Implement application controls
- Implement session management
- Implement continuous access assessment
Identity protection management
- Review identity protection fundamentals
- Implement and manage user risk policies
- Monitor, investigate, and remove high-risk users
- Implement security for workload identities
- Explore Microsoft Defender for identities
Access management for Azure resources
- Assign Azure roles
- Set up custom Azure roles
- Create and set up managed identities
- Access Azure resources with managed identities
- Analyze Azure role permissions
- Configure Azure Key Vault RBAC policies
- Retrieve objects from Azure Key Vault
- Use Microsoft Entra Permissions Management
Integration of enterprise applications
- Detection of apps with Microsoft Defender for Cloud Apps and Active Directory Federation
- Configuring app connectors
- Creating and managing app management roles
- Configuring pre-integrated gallery SaaS apps
- Implementation and management of OAuth app policies
Monitoring SSO integration
- Perform token adjustments
- Configure consent settings
- Connect local applications to Microsoft Entra Application Proxy
- Integrate custom SaaS applications for single sign-on
- Implement application-based user provisioning
- Monitor and audit access to Microsoft Entra apps
- Create and manage application collections
Set up app registration
- Strategic planning of application registration
- Implementation of application registration
- Registration of an application
- Configuration of application permissions
- Granting administrative approval for all applications
- Implementation of application authorization
- Management and monitoring of applications through app governance
Claims management organization
- Set access packages
- Configure permissions
- Manage affiliated organizations
- Check permissions for users
Access control management
- Plan access checks
- Access control for groups and applications
- Access control programs
- Monitoring access checks and their results
- Automating administrative tasks for access controls
- Set up recurring access controls
Access authorization
- Definition of a privileged access strategy
- Configuring privileged identity management
- Planning and configuring groups for privileged access
- Evaluating the audit trail and reports of privileged identity management
- Creating and managing emergency access accounts
Monitoring and maintenance
- Evaluation of login logs
- Analysis of Microsoft Entra audit logs
- Exporting logs to an external system
- Microsoft Entra workbooks and reports
- Monitoring the security situation with Identity Secure Score
