SC-300 : Microsoft Identity and Access Administrator

This module covers definitions and available services for identity provided in Microsoft Entra ID and to Microsoft 365. You start with authentication, authorization, and access tokens then build into full identity solutions.

Learning objectives

After completing this module, you will be able to:

• Define common identity terms and explain how they’re used in the Microsoft Cloud
• Explore the common management tools and needs of an identity solution
• Review the goal of Zero Trust and how it’s applied in the Microsoft Cloud
• Explore the available identity services in the Microsoft Cloud

Learn to create an initial Azure Active Directory configuration to ensure all the identity solutions available in Azure are ready to use. This module explores how to build and configure an Azure AD system.

Learning objectives

After completing this module, you will be able to:

• Implement initial configuration of Azure Active Directory
• Create, configure, and manage identities
• Implement and manage external identities (excluding B2C scenarios)
• Implement and manage hybrid identity

Access to cloud-based workloads needs to be controlled centrally by providing a definitive identity for each user and resource. You can ensure employees and vendors have just-enough access to do their job.

Learning objectives

After completing this module, you will know how to :

• Create, configure, and manage users
• Create, configure, and manage groups
• Manage licenses
• Explain custom security attributes and automatic user provisioning

Inviting external users to use company Azure resources is a great benefit, but you want to do it in a secure way. Explore how to enable secure external collaboration.

Learning objectives

After completing this module, you will be able to:

• Manage external collaboration settings in Microsoft Entra ID
• Invite external users (individually or in bulk)
• Manage external user accounts in Microsoft Entra ID
• Configure identity providers (social and SAML/WS-fed)

Creating a hybrid-identity solution to use your on-premises active directory can be challenging. Explore how to implement a secure hybrid-identity solution.

Learning objectives

After completing this module, learners will be able to:

• Plan, design, and implement Microsoft Entra Connect
• Manage Microsoft Entra Connect
• Manage password hash synchronization (PHS)
• Manage pass-through authentication (PTA)
• Manage seamless single sign-on (seamless SSO)
• Manage federation excluding manual ADFS deployments
• Troubleshoot synchronization errors
• Implement and manage Microsoft Entra Connect Health

Learn how to use multifactor authentication with Microsoft Entra ID to harden your user accounts.

Learning objectives

In this module, you will learn how to use the Language service to :

• Learn about Microsoft Entra multifactor authentication (Microsoft Entra multifactor authentication)
• Create a plan to deploy Microsoft Entra multifactor authentication
• Turn on Microsoft Entra multifactor authentication for users and specific apps

There are multiple options for authentication in Microsoft Entra ID. Learn how to implement and manage the right authentications for users based on business needs.

Learning objectives
After completing this module, you will be able to :

• Administer authentication methods (FIDO2 / Passwordless)
• Implement an authentication solution based on Windows Hello for Business
• Configure and deploy self-service password reset
• Deploy and manage password protection
• Implement and manage tenant restrictions

Conditional Access gives a fine granularity of control over which users can do specific activities, access which resources, and how to ensure data and systems are safe.

Learning objectives

Upon completion of this module, the learner will be able to:

• Plan and implement security defaults.
• Plan conditional access policies.
• Implement conditional access policy controls and assignments (targeting, applications, and conditions).
• Test and troubleshoot conditional access policies.
• Implement application controls.
• Implement session management.
• Configure smart lockout thresholds.

Protecting a user’s identity by monitoring their usage and sign-in patterns ensure a secure cloud solution. Explore how to design and implement Microsoft Entra Identity protection.

Learning objectives

In this module, you will learn how to :

• Implement and manage a user risk policy
• Implement and manage sign-in risk policies
• Implement and manage MFA registration policy
• Monitor, investigate, and remediate elevated risky users

Audit and diagnostic logs within Microsoft Entra ID provide a rich view into how users are accessing your Azure solution. Learn to monitor, troubleshoot, and analyze sign-in data.

Learning objectives

After completing this module, you’ll be able to :

• Analyze and investigate sign in logs to troubleshoot access issues
• Review and monitor Microsoft Entra audit logs
• Enable and integrate Microsoft Entra diagnostic logs with Log Analytics / Azure Sentinel
• Export sign in and audit logs to a third-party SIEM (security information and event management)
• Review Microsoft Entra activity by using Log Analytics / Azure Sentinel, excluding KQL (Kusto Query Language) use
• Analyze Microsoft Entra workbooks / reporting
• Configure notifications