microsoft partner logo color
8349  Reviews star_rate star_rate star_rate star_rate star_half

Microsoft Identity and Access Administrator

The Microsoft Identity and Access Administrator course explores how to design, implement, and operate an organization’s identity and access management systems by using Microsoft Entra ID. Learn to...

Read More
$2,380 USD GSA  $1,798.49
Duration 4 days
Course Code SC-300T00
Available Formats Classroom, Virtual

Overview

The Microsoft Identity and Access Administrator course explores how to design, implement, and operate an organization’s identity and access management systems by using Microsoft Entra ID. Learn to manage tasks such as providing secure authentication and authorization access to enterprise applications. You will also learn to provide seamless experiences and self-service management capabilities for all users. Finally, learn to create adaptive access and governance of your identity and access management solutions ensuring you can troubleshoot, monitor, and report on your environment. The Identity and Access Administrator may be a single individual or a member of a larger team. Learn how this role collaborates with many other roles in the organization to drive strategic identity projects. The end goal is to provide you knowledge to modernize identity solutions, to implement hybrid identity solutions, and to implement identity governance.

Audience Profile

This course is for the Identity and Access Administrators who are planning to take the associated certification exam, or who are performing identity and access administration tasks in their day-to-day job. This course would also be helpful to an administrator or engineer that wants to specialize in providing identity solutions and access management systems for Azure-based solutions; playing an integral role in protecting an organization.

Skills Gained

After completing this course, students will be able to:

  • Implement an identity management solution
  • Implement an authentication and access management solutions
  • Implement access management for apps
  • Plan and implement an identity governancy strategy

Prerequisites

Before attending this course, students should have understanding of:

  • Security best practices and industry security requirements such as defense in depth, least privileged access, shared responsibility, and zero trust model.
  • Be familiar with identity concepts such as authentication, authorization, and active directory.
  • Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.
  • Some experience with Windows and Linux operating systems and scripting languages is helpful but not required. Course labs may use PowerShell and the CLI.
Prerequisite courses (or equivalent knowledge and hands-on experience):
This free online training will give you the experience you need to be successful in this course.
  • SC-900 part 1: Describe the concepts of security, compliance, and identity - Learn | Microsoft Docs
  • SC-900 part 2: Describe the capabilities of Microsoft Identity and access management solutions - Learn | Microsoft Docs
  • SC-900 part 3: Describe the capabilities of Microsoft security solutions - Learn | Microsoft Docs
  • SC-900 part 4: Describe the capabilities of Microsoft compliance solutions - Learn | Microsoft Docs
  • AZ-104: Manage identities and governance in Azure - Learn | Microsoft Docs


Course Details

Outline

  • Explore identity in Microsoft Entra ID
    • Explain the identity landscape
    • Explore Zero Trust with identity
    • Discuss identity as a control plane
    • Explore why we have identity
    • Define identity administration
    • Contrast decentralized identity with central identity systems
    • Discuss identity management solutions
    • Explain Microsoft Entra Business to Business
    • Compare Microsoft identity providers
    • Define identity licensing
    • Explore authentication
    • Discuss authorization
    • Explain auditing in identity
    • Module assessment
  • Implement initial configuration of Microsoft Entra ID
    • Configure company brand
    • Configure and manage Microsoft Entra roles
    • Exercise manage users roles
    • Configure delegation by using administrative units
    • Analyze Microsoft Entra role permissions
    • Configure and manage custom domains
    • Configure tenant-wide setting
    • Exercise - setting tenant-wide properties
    • Knowledge check
    • Summary and resources
  • Create, configure, and manage identities
    • Create, configure, and manage users
    • Exercise - assign licenses to users
    • Exercise - restore or remove deleted users
    • Create, configure, and manage groups
    • Exercise - add groups in Microsoft Entra ID
    • Configure and manage device registration
    • Manage licenses
    • Exercise - change group license assignments
    • Exercise - change user license assignments
    • Create custom security attributes
    • Explore automatic user creation
    • Module assessment
    • Summary and resources
  • Implement and manage external identities
    • Describe guest access and Business to Business accounts
    • Manage external collaboration
    • Exercise - configure external collaboration
    • Invite external users - individually and in bulk
    • Exercise - add guest users to directory
    • Exercise - invite guest users bulk
    • Demo - manage guest users in Microsoft Entra ID
    • Manage external user accounts in Microsoft Entra ID
    • Manage external users in Microsoft 365 workloads
    • Exercise - explore dynamic groups
    • Implement and manage Microsoft Entra Verified ID
    • Configure identity providers
    • Implement cross-tenant access controls
    • Knowledge check
    • Summary and resources
  • Implement and manage hybrid identity
    • Plan, design, and implement Microsoft Entra Connect
    • Implement manage password hash synchronization (PHS)
    • Implement manage pass-through authentication (PTA)
    • Demo - Manage pass-through authentication and seamless single sign-on (SSO)
    • Implement and manage federation
    • Trouble-shoot synchronization errors
    • Implement Microsoft Entra Connect Health
    • Manage Microsoft Entra Health
    • Knowledge check
    • Summary and resources
  • Secure Microsoft Entra users with multifactor authentication
    • What is Microsoft Entra multifactor authentication?
    • Plan your multifactor authentication deployment
    • Exercise - Enable Microsoft Entra multifactor authentication
    • Configure multifactor authentication methods
  • Manage user authentication
    • Administer FIDO2 and passwordless authentication methods
    • Explore Authenticator app and OATH tokens
    • Implement an authentication solution based on Windows Hello for Business
    • Exercise configure and deploy self-service password reset
    • Deploy and manage password protection
    • Configure smart lockout thresholds
    • Exercise - Manage Microsoft Entra smart lockout values
    • Implement Kerberos and certificate-based authentication in Microsoft Entra ID
    • Configure Microsoft Entra user authentication for virtual machines
    • Module assessment
    • Summary and resources
  • Plan, implement, and administer Conditional Access
    • Plan security defaults
    • Exercise - Work with security defaults
    • Plan Conditional Access policies
    • Implement Conditional Access policy controls and assignments
    • Exercise - Implement Conditional Access policies roles and assignments
    • Test and troubleshoot Conditional Access policies
    • Implement application controls
    • Implement session management
    • Exercise - Configure authentication session controls
    • Implement continuous access evaluation
    • Module assessment
    • Summary and resources
  • Manage Microsoft Entra Identity Protection
    • Review identity protection basics
    • Implement and manage user risk policy
    • Exercise enable sign-in risk policy
    • Exercise configure Microsoft Entra multifactor authentication registration policy
    • Monitor, investigate, and remediate elevated risky users
    • Implement security for workload identities
    • Explore Microsoft Defender for Identity
    • Module assessment
    • Summary and resources
  • Implement access management for Azure resources
    • Assign Azure roles
    • Configure custom Azure roles
    • Create and configure managed identities
    • Access Azure resources with managed identities
    • Analyze Azure role permissions
    • Configure Azure Key Vault RBAC policies
    • Retrieve objects from Azure Key Vault
    • Explore Microsoft Entra Permissions Management
    • Module assessment
    • Summary and resources
  • Deploy and Configure Microsoft Entra Global Secure Access
    • Explore Global Secure Access
    • Deploy and configure Microsoft Entra Internet Access
    • Deploy and configure Microsoft Entra Private Access
    • Explore how to use the Dashboard to drive Global Secure Access
    • Create remote networks for use with Global Secure Access
    • Use Conditional Access with Global Secure Access
    • Explore logs and monitoring options with Global Secure Access
    • Module assessment
    • Summary and resources
  • Plan and design the integration of enterprise apps for SSO
    • Discover apps by using Microsoft Defender for Cloud Apps and Active Directory Federation Services app report
    • Configure connectors to apps
    • Exercise implement access management for apps
    • Design and implement app management roles
    • Exercise create a custom role to manage app registration
    • Configure preintegrated gallery SaaS apps
    • Implement and manage policies for OAuth apps
    • Module Assessment
    • Summary and resources
  • Implement and monitor the integration of enterprise apps for SSO
    • Implement token customizations
    • Implement and configure consent settings
    • Integrate on-premises apps with Microsoft Entra application proxy
    • Integrate custom SaaS apps for single sign-on
    • Implement application-based user provisioning
    • Monitor and audit access to Microsoft Entra integrated enterprise applications
    • Create and manage application collections
    • Knowledge check
    • Summary and resources
  • Implement app registration
    • Plan your line of business application registration strategy
    • Implement application registration
    • Register an application
    • Configure permission for an application
    • Grant tenant-wide admin consent to applications
    • Implement application authorization
    • Exercise add app roles to an application and receive tokens
    • Manage and monitor application by using app governance
    • Module assessment
    • Summary and resources
  • Register apps using Microsoft Entra ID
    • Plan for app registration
    • Explore application objects and service principals
    • Create app registrations
    • Configure app authentication
    • Configure API permissions
    • Create app roles
    • Module assessment
  • Plan and implement entitlement management
    • Define access packages
    • Exercise create and manage a resource catalog with Microsoft Entra entitlement management
    • Configure entitlement management
    • Exercise add terms of use acceptance report
    • Exercise manage the lifecycle of external users with Microsoft Entra identity governance
    • Configure and manage connected organizations
    • Review per-user entitlements
    • Module assessment
    • Summary and resources
  • Plan, implement, and manage access review
    • Plan for access reviews
    • Create access reviews for groups and apps
    • Create and configure access reviews programmatically
    • Monitor access review findings
    • Automate access review management tasks
    • Configure recurring access reviews
    • Module assessment
    • Summary and resources
  • Plan and implement privileged access
    • Define a privileged access strategy for administrative users
    • Configure Privileged Identity Management for Azure resources
    • Exercise configure Privileged Identity Management for Microsoft Entra roles
    • Exercise assign Microsoft Entra roles in Privileged Identity Management
    • Exercise assign Azure resource roles in Privileged Identity Management
    • Plan and configure Privileged Access Groups
    • Analyze Privileged Identity Management audit history and reports
    • Create and manage emergency access accounts
    • Module assessment
    • Summary and resources
  • Monitor and maintain Microsoft Entra ID
    • Analyze and investigate sign-in logs to troubleshoot access issues
    • Review and monitor Microsoft Entra audit logs
    • Exercise connect data from Microsoft Entra ID to Microsoft Sentinel
    • Export logs to third-party security information and event management system
    • Analyze Microsoft Entra workbooks and reporting
    • Monitor security posture with Identity Secure Score
    • Module assessment
    • Summary and resources
|
View Full Schedule

Schedule

5 options available

  • Guaranteed to Run
    Jun 9, 2025 - Jun 12, 2025 (4 days)
    Live Virtual | 9:00AM 5:00PM EDT
    Language English
    Select from 2 options below
    Live Virtual |9:00AM 5:00PM EDT
    Live Virtual | 9:00AM 5:00PM EDT Virtual | 9:00 AM 5:00 PM EDT
    Enroll
    Enroll Add to quote
  • Aug 25, 2025 - Aug 28, 2025 (4 days)
    Live Virtual | 9:00AM 5:00PM EDT
    Language English
    Select from 1 options below
    Live Virtual |9:00AM 5:00PM EDT
    Live Virtual | 9:00AM 5:00PM EDT
    Enroll
    Enroll Add to quote
  • Sep 29, 2025 - Oct 2, 2025 (4 days)
    Live Virtual | 9:00AM 5:00PM EDT
    Language English
    Select from 1 options below
    Live Virtual |9:00AM 5:00PM EDT
    Live Virtual | 9:00AM 5:00PM EDT
    Enroll
    Enroll Add to quote
  • Dec 1, 2025 - Dec 4, 2025 (4 days)
    Live Virtual | 9:00AM 5:00PM EST
    Language English
    Select from 1 options below
    Live Virtual |9:00AM 5:00PM EST
    Live Virtual | 9:00AM 5:00PM EST
    Enroll
    Enroll Add to quote

FAQ

How do I get a Microsoft exam voucher?

Pearson Vue Exam vouchers can be requested and ordered with your course purchase or can be ordered separately by clicking here.

  • Vouchers are non-refundable and non-returnable. Vouchers expire 12 months from the date they are issued unless otherwise specified in the terms and conditions.
  • Voucher expiration dates cannot be extended. The exam must be taken by the expiration date printed on the voucher.

Do Microsoft courses come with post lab access?

Most Microsoft official courses will include post-lab access ranging from 30 to 180 calendar days after instructor led course delivery. A lab training key in class will be provided that can be leveraged to continue connecting to a remote lab environment for the individual course attendee.

Does the course schedule include a Lunchbreak?

Lunch is normally an hour-long after 3-3.5 hours of the class day.

What languages are used to deliver training?

Microsoft courses are conducted in English unless otherwise specified.

Reviews

Simply great training provider that I can go for updating/acquiring my skill sets.

ExitCertified gave me some good trainings and I got to learn through doing labs.

Class was very informative, although one lab didnt but will try again later

The format of the class was concise. I learned new skills to use at my workplace.

Easy to work with. Learning material pdfs were able to be printed out in color which was very nice to write on.