Microsoft Identity and Access Administrator SC300 Course Outline
Module 1: Explore Identity and Azure AD
- Introduction
- Explain the Identity Landscape
- Explore Zero Trust with Identity
- Discuss Identity as a Control Plane
- Explore Why We Have Identity
- Define Identity Administration
- Contrast Decentralised Identity with Central Identity Systems
- Discuss Identity Management Solutions
- Explain Azure AD Business to Business
- Compare Microsoft Identity Providers
- Define Identity Licensing
- Explore Authentication
- Discuss Authorisation
- Explain Auditing in Identity
Module 2: Implement Initial Configuration of Azure Active Directory
- Introduction
- Configure Company Brand
- Configure and Manage Azure Active Directory Roles
- Exercise: Manage Users Roles
- Configure Delegation by Using Administrative Units
- Analyse Azure AD Role Permissions
- Configure and Manage Custom Domains
- Configure Tenant-Wide Settings
- Exercise: Setting Tenant-Wide Properties
Module 3: Create, Configure, and Manage Identities
- Introduction
- Create, Configure, and Manage Users
- Exercise: Assign Licenses to Users
- Exercise: Restore or Remove Deleted Users
- Create, Configure, and Manage Groups
- Exercise: Add Groups in Azure Active Directory
- Configure and Manage Device Registration
- Manage Licenses
- Exercise: Change Group License Assignments
- Exercise: Change User License Assignments
- Create Custom Security Attributes
- Explore Automatic User Creation
Module 4: Implement and Manage External Identities
- Introduction
- Describe Guest Access and Business to Business Accounts
- Manage External Collaboration
- Exercise: Configure External Collaboration
- Invite External Users - Individually and in Bulk
- Exercise: Add Guest Users to Directory
- Exercise: Invite Guest Users in Bulk
- Demo: Manage Guest Users in Azure Active Directory
- Manage External User Accounts in Azure Active Directory
- Manage External Users in Microsoft 365 Workloads
- Exercise: Explore Dynamic Groups
- Implement Cross-Tenant Access Controls
- Configure Identity Providers
- Implement and Manage Entra Verified ID
Module 5: Implement and Manage Hybrid Identity
- Introduction
- Plan, Design, and Implement Azure Active Directory Connect
- Implement Manage Password Hash Synchronisation (PHS)
- Implement Manage Pass-Through Authentication (PTA)
- Demo: Manage Pass-Through Authentication and Seamless Single Sign-On (SSO)
- Implement and Manage Federation
- Troubleshoot Synchronisation Errors
- Implement Azure Active Directory Connect Health
- Manage Azure Active Directory Connect Health
Module 6: Secure Azure Active Directory Users with Multi-Factor Authentication
- Introduction
- What Is Azure AD Multi-Factor Authentication?
- Plan Your Multi-Factor Authentication Deployment
- Exercise: Enable Azure AD Multi-Factor Authentication
- Configure Multi-Factor Authentication Methods
Module 7: Manage User Authentication
- Introduction
- Administer FIDO2 and Passwordless Authentication Methods
- Explore Authenticator App and OATH Tokens
- Implement an Authentication Solution Based on Windows Hello for Business
- Exercise: Configure and Deploy Self-Service Password Reset
- Deploy and Manage Password Protection
- Configure Smart Lockout Thresholds
- Exercise: Manage Azure Active Directory Smart Lockout Values
- Implement Kerberos and Certificate-Based Authentication in Azure AD
- Configure Azure AD User Authentication for Virtual Machines
Module 8: Plan, Implement, and Administer Conditional Access
- Introduction
- Plan Security Defaults
- Exercise: Work with Security Defaults
- Plan Conditional Access Policies
- Implement Conditional Access Policy Controls and Assignments
- Exercise: Implement Conditional Access Policies Roles and Assignments
- Test and Troubleshoot Conditional Access Policies
- Implement Application Controls
- Implement Session Management
- Exercise: Configure Authentication Session Controls
- Implement Continuous Access Evaluation
Module 9: Manage Azure AD Identity Protection
- Introduction
- Review Identity Protection Basics
- Implement and Manage User Risk Policy
- Exercise: Enable Sign-In Risk Policy
- Exercise: Configure Azure Active Directory Multi-Factor Authentication Registration Policy
- Monitor, Investigate, and Remediate Elevated Risky Users
- Implement Security for Workload Identities
- Explore Microsoft Defender for Identity
Module 10: Implement Access Management for Azure Resources
- Introduction
- Assign Azure Roles
- Configure Custom Azure Roles
- Create and Configure Managed Identities
- Access Azure Resources with Managed Identities
- Analyse Azure Role Permissions
- Configure Azure Key Vault RBAC Policies
- Retrieve Objects from Azure Key Vault
- Explore Entra Permissions Management (CloudKnox)
Module 11: Plan and Design the Integration of Enterprise Apps for SSO
- Introduction
- Discover Apps by Using Microsoft Defender for Cloud Apps and Active Directory Federation Services App Report
- Configure Connectors to Apps
- Exercise: Implement Access Management for Apps
- Design and Implement App Management Roles
- Exercise: Create a Custom Role to Manage App Registration
- Configure Pre-Integrated Gallery SaaS Apps
- Implement and Manage Policies for OAuth Apps
Module 12: Implement and Monitor the Integration of Enterprise Apps for SSO
- Introduction
- Implement Token Customisations
- Implement and Configure Consent Settings
- Integrate On-Premises Apps by Using Azure Active Directory Application Proxy
- Integrate Custom SaaS Apps for Single Sign-On
- Implement Application User Provisioning
- Monitor and Audit Access to Azure Active Directory Integrated Applications
- Create and Manage Application Collections
Module 13: Implement App Registration
- Introduction
- Plan Your Line of Business Application Registration Strategy
- Implement Application Registration
- Exercise: Register an Application
- Configure Application Permission
- Exercise: Grant Tenant-Wide Admin Consent to an Application
- Implement Application Authorisation
- Exercise: Add App Roles to Application and Receive Tokens
- Manage and Monitor Applications with App Governance
Module 14: Plan and Implement Entitlement Management
- Introduction
- Define Access Packages
- Exercise: Create and Manage a Resource Catalog with Azure AD Entitlement
- Configure Entitlement Management
- Exercise: Add Terms of Use Acceptance Report
- Exercise: Manage the Lifecycle of External Users with Azure AD Identity Governance
- Configure and Manage Connected Organisations
- Review Per-User Entitlements
Module 15: Plan, Implement, and Manage Access Review
- Introduction
- Plan for Access Reviews
- Create Access Reviews for Groups and Apps
- Create and Configure Access Review Programs
- Monitor Access Review Findings
- Automate Access Review Management Tasks
- Configure Recurring Access Reviews
Module 16: Plan and Implement Privileged Access
- Introduction
- Define a Privileged Access Strategy for Administrative Users
- Configure Privileged Identity Management for Azure Resources
- Exercise: Configure Privileged Identity Management for Azure Active Directory Roles
- Exercise: Assign Azure Active Directory Roles in Privileged Identity Management
- Exercise: Assign Azure Resource Roles in Privileged Identity Management
- Plan and Configure Privileged Access Groups
- Analyse Privileged Identity Management Audit History and Reports
- Create and Manage Emergency Access Accounts
Module 17: Monitor and Maintain Azure Active Directory
- Introduction
- Analyse and Investigate Sign-In Logs to Troubleshoot Access Issues
- Review and Monitor Azure Active Directory Audit Logs
- Exercise: Connect Data from Azure Active Directory to Microsoft Sentinel
- Export Logs to Third-Party Security Information and Event Management System
- Analyse Azure Active Directory Workbooks and Reporting
- Monitor Security Posture with Identity Secure Score
Back to course information
If you wish to make any changes to your course, please
