Microsoft Identity and Access Administrator (SC-300)

Categories: MicrosoftPearson Skilling Suite

This instructor-led Microsoft Identity and Access Administrator course prepares you for the Microsoft Exam SC-300 by focusing on the knowledge needed to configure and manage Azure AD tenants; create, configure, and manage Azure AD identities; implement and manage external identities and hybrid identity; plan, implement, and manage Azure Multifactor Authentication (MFA), self-service password reset, Azure AD user authentication, and Azure AD conditional access; manage Azure AD Identity Protection; implement access management for Azure resources; manage and monitor app access with Microsoft Defender for Cloud Apps; plan, implement, and monitor enterprise app integration; enable app registration; plan and implement entitlement management and privileged access; plan, implement, and manage access reviews; and monitor Azure AD. This course focuses on the critical thinking and decision-making acumen needed for success at the Microsoft Certified: Identity and Access Administrator Associate level.

Learning Outcomes:

Implement identities in Azure AD
Implement an authentication and access management solution
Implement Access Management for Apps
Plan and implement an Identity Governance strategy

Optional Add-On Exam Voucher

Lesson 1: Implement Identities in Azure AD

Configure and manage an Azure AD tenant: Azure AD roles; delegation via administrative units; role permissions; custom domains; tenant-wide settings
Create, configure, and manage Azure AD identities: users; groups; device joins/registrations; license assignment and reporting
Implement and manage external identities: external collaboration settings; inviting external users; managing external user accounts; identity providers (SAML, WS-Fed)
Implement and manage hybrid identity: Azure AD Connect and Cloud Sync; Password Hash Sync; Pass-Through Authentication; Seamless SSO; Federation; Azure AD Connect Health; troubleshooting synchronization

Lesson 2: Implement an Authentication and Access Management Solution

Plan, implement, and manage Azure MFA and self-service password reset
Plan, implement, and manage Azure AD user authentication: Windows Hello for Business; password protection and smart lockout; certificate-based authentication; auth for Windows/Linux VMs on Azure
Plan, implement, and manage Azure AD conditional access: policy assignments, controls, testing/troubleshooting, session management, device-enforcement restrictions, continuous access evaluation
Manage Azure AD Identity Protection: user risk and sign-in risk policies; MFA registration policy; investigating risky users; workload identity security
Implement access management for Azure resources: Azure role assignment; custom Azure roles; managed identities; Azure Key Vault RBAC and policies

Lesson 3: Implement Access Management for Apps

Plan, implement, and monitor Enterprise app integration for SSO, including app discovery, management roles, gallery/custom SaaS apps, Application Proxy, and consent settings
Implement app registrations, including application permissions and authorization
Manage and monitor application access using Microsoft Defender for Cloud Apps, including Conditional Access App Control and OAuth app policies

Lesson 4: Plan and Implement an Identity Governance Strategy

Plan and implement entitlement management: catalogs, access packages, access requests, Terms of Use, external user lifecycle, connected organizations
Plan, implement, and manage access reviews for groups, apps, access packages, and Azure AD/resource roles
Plan and implement privileged access using Privileged Identity Management (PIM), including privileged access groups and break-glass accounts
Monitor Azure AD: sign-in/audit/provisioning logs; diagnostic settings; SIEM export; Log Analytics/KQL; Identity Secure Score

Suitable for

An administrator, security engineer, or other IT professional who provides, or plans to provide, secure identity and access services for an enterprise

Pre-requisite

IT professionals who design, implement, and operate an organization’s identity and access management systems by using Microsoft Azure Active Directory (Azure AD)

Duration

Certificate

Microsoft Certified: Identity and Access Administrator Associate

Governing Body

Microsoft

Examination Body

Pearson VUE

SKILLING SUITE FEATURES

In-Demand And Up To Date Courseware

Choose from over 60 titles of engaging and in-demand content from leading industry authors. All courseware aligns with the latest exam requirements and is continuously updated and improved.

Live Contextualised Labs

Improve the experience by offering a handson, live environment where learners can test their knowledge and practice new skills.

Practice Tests And Exam Pass Pledge

Help learners increase their certification readiness with practice tests designed to improve pass rates. If needed, our Exam Pass Pledge means you can give learners a free retake within 30 days of passing their last practice test.