Microsoft Identity and Access Administrator (SC-300)


Course Number: MOC-SC-300

Duration: 4 days (26 hours)

Format: Live, hands-on

Microsoft Identity and Access Administrator Training Overview

This Microsoft Identity and Access Administrator (SC-300) training class teaches teams how to implement identity management solutions based on Microsoft Azure AD and its connected identity technologies. Attendees learn how to use identity content for Azure AD, enterprise application registration, conditional access, identity governance, and other identity tools. This course prepares students for the SC-300 exam for which every attendee receives a voucher.

Location and Pricing

Accelebrate offers instructor-led enterprise training for groups of 3 or more online or at your site. Most Accelebrate classes can be flexibly scheduled for your group, including delivery in half-day segments across a week or set of weeks. To receive a customized proposal and price quote for private corporate training on-site or online, please contact us.

In addition, some Microsoft courses are available as live, online classes for individuals.

Objectives

  • Implement initial configuration of Azure Active Directory
  • Manage external collaboration settings in Azure Active Directory
  • Configure identity providers (social and SAML/WS-fed)
  • Manage Seamless Single Sign-On (Seamless SSO)
  • Create and manage a resource catalog with Azure AD entitlement
  • Implement application registration and configure permissions
  • Configure Privileged Identity Management for Azure AD roles and Azure resources
  • Work with the Azure Active Directory

Prerequisites

  • Knowledge of security best practices and industry security requirements such as defense in depth, least privileged access, shared responsibility, and zero trust model.
  • Familiarity with identity concepts such as authentication, authorization, and active directory.
  • Some experience deploying Azure workloads. Because this course does not cover the basics of Azure administration but builds on that knowledge by adding security-specific information, students should have taken Microsoft Azure Administrator Training (AZ-104) or have the equivalent knowledge.
  • Some experience with Windows and Linux operating systems. Experience with scripting languages is helpful but not required. Course labs may use PowerShell and the CLI.

Outline

Expand All | Collapse All

Explore Identity in Azure AD
  • Explain the identity landscape
  • Explore zero trust with identity
  • Discuss identity as a control plane
  • Explore why we have identity
  • Define identity administration
  • Contrast decentralized identity with central identity systems
  • Discuss identity management solutions
  • Explain Azure AD Business to Business
  • Compare Microsoft identity providers
  • Define identity licensing
  • Explore authentication
  • Discuss authorization
  • Explain auditing in identity
Implement Initial Configuration of Azure Active Directory
  • Configure company brand
  • Configure and manage Azure Active Directory roles
  • Manage user roles
  • Configure delegation by using administrative units
  • Analyze Azure AD role permissions
  • Configure and manage custom domains
  • Configure tenant-wide setting
  • Setting tenant-wide properties
  • Create, configure, and manage identities
  • Create, configure, and manage users
  • Assign licenses to users
  • Restore or remove deleted users
  • Create, configure, and manage groups
  • Add groups in Azure Active Directory
  • Configure and manage device registration
  • Manage licenses
  • Change group license assignments
  • Change user license assignments
  • Create custom security attributes
  • Explore automatic user creation
Create, Configure, and Manage Identities
  • Create, configure, and manage users
  • Assign licenses to users
  • Restore or remove deleted users
  • Create, configure, and manage groups
  • Add groups in Azure Active Directory
  • Configure and manage device registration
  • Manage licenses
  • Change group license assignments
  • Describe guest access and Business to Business accounts3 min
  • Manage external collaboration
  • Configure external collaboration
  • Invite external users - individually and in bulk
  • Add guest users to directory
  • Invite guest users bulk
  • Manage guest users in Azure Active Directory
  • Manage external user accounts in Azure Active Directory
  • Manage external users in Microsoft 365 workloads
  • Explore dynamic groups
  • Implement cross-tenant access controls
  • Configure identity providers
  • Implement and manage Entra Verified ID
  • Change user license assignments
  • Create custom security attributes
  • Explore automatic user creation
  • Implement and Manage External Identities
Implement and Manage Hybrid Identity
  • Plan, design, and implement Azure Active Directory Connect
  • Implement manage password hash synchronization (PHS)
  • Implement manage pass-through authentication (PTA)
  • Manage pass-through authentication and Seamless Single Sign-On (SSO)
  • Implement and manage federation
  • Trouble-shoot synchronization errors
  • Implement Azure Active Directory Connect Health
  • Manage Azure Active Directory Connect Health
Secure Azure Active Directory Users with Multi-Factor Authentication
  • What is Azure AD Multi-Factor Authentication?
  • Plan your multi-factor authentication deployment
  • Enable Azure AD Multi-Factor Authentication
  • Configure multi-factor authentication methods
Manage User Authentication
  • Administer FIDO2 and passwordless authentication methods
  • Explore the Authenticator app and OATH tokens
  • Implement an authentication solution based on Windows Hello for Business
  • Configure and deploy self-service password reset
  • Deploy and manage password protection
  • Configure smart lockout thresholds
  • Manage Azure Active Directory smart lockout values
  • Implement Kerberos and certificate-based authentication in Azure AD
  • Configure Azure AD user authentication for virtual machines
Plan, Implement, and Administer Conditional Access
  • Plan security defaults
  • Work with security defaults
  • Plan Conditional Access policies
  • Implement Conditional Access policy controls and assignments
  • Implement Conditional Access policies roles and assignments
  • Test and troubleshoot Conditional Access policies
  • Implement application controls
  • Implement session management
  • Configure authentication session controls
  • Implement continuous access evaluation
Manage Azure AD Identity Protection
  • Review identity protection basics
  • Implement and manage user risk policy
  • Exercise enable sign-in risk policy
  • Exercise configure Azure Active Directory multi-factor authentication registration policy
  • Monitor, investigate, and remediate elevated risky users
  • Implement security for workload identities
  • Explore Microsoft Defender for Identity
Implement Access Management for Azure Resources
  • Assign Azure roles
  • Configure custom Azure roles
  • Create and configure managed identities
  • Access Azure resources with managed identities
  • Analyze Azure role permissions
  • Configure Azure Key Vault RBAC policies
  • Retrieve objects from Azure Key Vault
  • Explore Entra Permissions Management (CloudKnox)
Plan and Design the Integration of Enterprise Apps for SSO
  • Discover apps by using Microsoft Defender for Cloud Apps and Active Directory Federation Services app report
  • Configure connectors to apps
  • Implement access management for apps
  • Design and implement app management roles
  • Create a custom role to manage app registration
  • Configure pre-integrated gallery SaaS apps
  • Implement and manage policies for OAuth apps
Implement and Monitor the Integration of Enterprise Apps for SSO
  • Implement token customizations
  • Implement and configure consent settings
  • Integrate on-premises apps by using Azure Active Directory application proxy
  • Integrate custom SaaS apps for single-sign-on
  • Implement application user provisioning
  • Monitor and audit access to Azure Active Directory integrated applications
  • Create and manage application collections
Implement App Registration
  • Plan your line of business application registration strategy
  • Implement application registration
  • Register an application
  • Configure application permission
  • Grant tenant-wide admin consent to an application
  • Implement application authorization
  • Add app roles to applications and receive tokens
  • Manage and monitor applications with App governance
Plan and Implement Entitlement Management
  • Define access packages
  • Create and manage a resource catalog with Azure AD entitlement
  • Configure entitlement management
  • Add terms of use acceptance report
  • Manage the lifecycle of external users with Azure AD identity governance
  • Configure and manage connected organizations
  • Review per-user entitlements
Plan, Implement, and Manage Access Review
  • Plan for access reviews18 min
  • Create access reviews for groups and apps12 min
  • Create and configure access review programs3 min
  • Monitor access review findings4 min
  • Automate access review management tasks2 min
  • Configure recurring access reviews
Plan and Implement Privileged Access
  • Define a privileged access strategy for administrative users10 min
  • Configure Privileged Identity Management for Azure resources2 min
  • Configure Privileged Identity Management for Azure Active Directory roles10 min
  • Assign Azure Active Directory roles in Privileged Identity Management10 min
  • Assign Azure resource roles in Privileged Identity Management8 min
  • Plan and configure Privileged Access Groups3 min
  • Analyze Privileged Identity Management audit history and reports8 min
  • Create and manage emergency access accounts
Monitor and Maintain Azure Active Directory
  • Analyze and investigate sign-in logs to troubleshoot access issues
  • Review and monitor Azure Active Directory audit logs
  • Connect data from Azure Active Directory to Microsoft Sentinel
  • Export logs to third-party security information and event management system
  • Analyze Azure Active Directory workbooks and reporting
  • Monitor security posture with Identity Secure Score
Conclusion

Training Materials

All Microsoft training students receive Microsoft official courseware.

For all Microsoft Official Courses taught in their entirety that have a corresponding certification exam, an exam voucher is included for each participant.

Software Requirements

Attendees will not need to install any software on their computer for this class. The class will be conducted in a remote environment that Accelebrate will provide; students will only need a local computer with a web browser and a stable Internet connection. Any recent version of Microsoft Edge, Mozilla Firefox, or Google Chrome will be fine.



Learn faster

Our live, instructor-led lectures are far more effective than pre-recorded classes

Satisfaction guarantee

If your team is not 100% satisfied with your training, we do what's necessary to make it right

Learn online from anywhere

Whether you are at home or in the office, we make learning interactive and engaging

Multiple Payment Options

We accept check, ACH/EFT, major credit cards, and most purchase orders



Recent Training Locations

Alabama

Birmingham

Huntsville

Montgomery

Alaska

Anchorage

Arizona

Phoenix

Tucson

Arkansas

Fayetteville

Little Rock

California

Los Angeles

Oakland

Orange County

Sacramento

San Diego

San Francisco

San Jose

Colorado

Boulder

Colorado Springs

Denver

Connecticut

Hartford

DC

Washington

Florida

Fort Lauderdale

Jacksonville

Miami

Orlando

Tampa

Georgia

Atlanta

Augusta

Savannah

Hawaii

Honolulu

Idaho

Boise

Illinois

Chicago

Indiana

Indianapolis

Iowa

Cedar Rapids

Des Moines

Kansas

Wichita

Kentucky

Lexington

Louisville

Louisiana

New Orleans

Maine

Portland

Maryland

Annapolis

Baltimore

Frederick

Hagerstown

Massachusetts

Boston

Cambridge

Springfield

Michigan

Ann Arbor

Detroit

Grand Rapids

Minnesota

Minneapolis

Saint Paul

Mississippi

Jackson

Missouri

Kansas City

St. Louis

Nebraska

Lincoln

Omaha

Nevada

Las Vegas

Reno

New Jersey

Princeton

New Mexico

Albuquerque

New York

Albany

Buffalo

New York City

White Plains

North Carolina

Charlotte

Durham

Raleigh

Ohio

Akron

Canton

Cincinnati

Cleveland

Columbus

Dayton

Oklahoma

Oklahoma City

Tulsa

Oregon

Portland

Pennsylvania

Philadelphia

Pittsburgh

Rhode Island

Providence

South Carolina

Charleston

Columbia

Greenville

Tennessee

Knoxville

Memphis

Nashville

Texas

Austin

Dallas

El Paso

Houston

San Antonio

Utah

Salt Lake City

Virginia

Alexandria

Arlington

Norfolk

Richmond

Washington

Seattle

Tacoma

West Virginia

Charleston

Wisconsin

Madison

Milwaukee

Alberta

Calgary

Edmonton

British Columbia

Vancouver

Manitoba

Winnipeg

Nova Scotia

Halifax

Ontario

Ottawa

Toronto

Quebec

Montreal

Puerto Rico

San Juan