GB
/
GBP
/
EN_GB

Shaping the future of IT skills

Maximising IT performance through learning

Microsoft Identity and Access Administrator - SC-300T00

WGAC-MIC-SC-300T00

Microsoft

Description

Show Tabs
Introduction

This course provides IT Identity and Access Professional, along with IT Security Professional, with the knowledge and skills needed to implement identity management solutions based on Microsoft Azure AD, and it connected identity technologies. This course includes identity content for Azure AD, enterprise application registration, conditional access, identity governance, and other identity tools.

Prerequisites & Audience

Before attending this course, students should have understanding of:

  • Security best practices and industry security requirements such as defense in depth, least privileged access, shared responsibility, and zero trust model.
  • Be familiar with identity concepts such as authentication, authorization, and active directory.
  • Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.
  • Some experience with Windows and Linux operating systems and scripting languages is helpful but not required. Course labs may use PowerShell and the CLI.

Prerequisite courses (or equivalent knowledge and hands-on experience):

  • Microsoft Security, Compliance, and Identity Fundamentals (SC-900T00)
  • Microsoft Azure Administrator (AZ-104T00)
Course Benefits

Course Objectives

  • Implement an identity management solution
  • Implement an authentication and access management solutions
  • Implement access management for apps
  • Plan and implement an identity governancy strategy
Course Topics
Module 1: Implement an identity management solution

Learn to create and manage your initial Azure Active Directory (Azure AD) implementation and configure the users, groups, and external identities you will use to run your solution.

Lessons
  • Implement Initial configuration of Azure AD
  • Create, configure, and manage identities
  • Implement and manage external identities
  • Implement and manage hybrid identity
  • Lab: Manage user roles
  • Lab: Setting tenant-wide properties
  • Lab: Assign licenses to users
  • Lab: Restore or remove deleted users
  • Lab: Add groups in Azure AD
  • Lab: Change group license assignments
  • Lab: Change user license assignments
  • Lab: Configure external collaboration
  • Lab: Add guest users to the directory
  • Lab: Explore dynamic groups

After completing this module, students will be able to:

  • Deploy an initial Azure AD with custom settings
  • Manage both internal and external identities
  • Implement a hybrid identity solution
Module 2: Implement an authentication and access management solution

Implement and administer your access management using Azure AD. Use MFA, conditional access, and identity protection to manager your identity solution.

Lessons
  • Secure Azure AD user with MFA
  • Manage user authentication
  • Plan, implement, and administer conditional access
  • Manage Azure AD identity protection
  • Lab: Configure Azure AD MFA authentication registration policy
  • Lab: Enable sign-in risk policy
  • Lab: Manage Azure AD smart lockout values
  • Lab: Configure authentication session controls
  • Lab: Implement conditional access policies, roles, and assignments
  • Lab: Work with security defaults
  • Lab: Configure and deploy self-service password reset (SSPR)
  • Lab: Enable Azure AD MFA

After completing this module, students will be able to:

  • Configure and manage user authentication including MFA
  • Control access to resources using conditional access
  • Use Azure AD Identity Protection to protect your organization
Module 3: Implement access management for Apps

Explore how applications can and should be added to your identity and access solution with application registration in Azure AD.

Lessons
  • Plan and design the integration of enterprise for SSO
  • Implement and monitor the integration of enterprise apps for SSO
  • Implement app registration
  • Lab: Implement access management for apps
  • Lab: Create a custom role to management app registration
  • Lab: Register an application
  • Lab: Grant tenant-wide admin consent to an application
  • Lab: Add app roles to applications and recieve tokens

After completing this module, students will be able to:

  • Register a new application to your Azure AD
  • Plan and implement SSO for enterprise application
  • Monitor and maintain enterprise applications
Module 4: Plan and implement an identity governancy strategy

Design and implement identity governance for your identity solution using entitlement, access reviews, privileged access, and monitoring your Azure Active Directory (Azure AD).

Lessons
  • Plan and implement entitlement management
  • Plan, implement, and manage access reviews
  • Plan and implement privileged access
  • Monitor and maintain Azure AD
  • Lab: Configure PIM for Azure AD roles
  • Lab: Assign Azure AD role in PIM
  • Lab: Assign Azure resource roles in PIM
  • Lab: Connect data from Azure AD to Azure Sentinel
  • Lab: Create access reviews for groups and apps
  • Lab: Manage the lifecycle of external users with Azure AD identity governance
  • Lab: Add terms of use acceptance report
  • Lab: Create and manage a resource catalog with Azure AD entitlement

After completing this module, students will be able to:

  • Manage and maintain Azure AD from creation to solution
  • Use access reviews to maintain your Azure AD
  • Grant access to users with entitlement management

Microsoft courses


Designing Microsoft Azure Infrastructure Solutions - AZ-305T00
CODE: WGAC-MIC-AZ-305T00
Microsoft Power Platform Functional Consultant - PL-200T00
CODE: WGAC-MIC-PL-200T00
Azure Administration for AWS SysOps - AZ-010T00
CODE: WGAC-MIC-AZ-010T00
Microsoft Dynamics 365 Sales - MB-210T01
CODE: WGAC-MIC-MB-210T01
Microsoft Identity and Access Administrator - SC-300T00
CODE: WGAC-MIC-SC-300T00
Microsoft Azure technologies for AWS architects - AZ-030T00
CODE: WGAC-MIC-AZ-030T00
Microsoft 365 Messaging - MS-203T00
CODE: WGAC-MIC-MS-203T00
Building Applications and Solutions with Microsoft 365 Core Services -MS-600T00
CODE: WGAC-MIC-MS-600T00
Designing and Implementing Microsoft Azure Networking Solutions - AZ-700T00
CODE: WGAC-MIC-AZ-700T00
Migrate SQL workloads to Azure - DP-050T00
CODE: WGAC-MIC-DP-050T00
Azure Architect Technologies - AZ-303T00
CODE: WGAC-MIC-AZ-303T00
Microsoft Dynamics 365: Finance and Operations Apps Solution Architect - MB-700T00
CODE: WGAC-MIC-MB-700T00
Microsoft Azure Fundamentals - AZ-900T01
CODE: WGAC-MIC-AZ-900T01
Implementing a Machine Learning Solution with Azure Databricks - DP-090T00
CODE: WGAC-MIC-DP-090T00
Designing and Implementing an Azure AI Solution - AI-100T01
CODE: WGAC-MIC-AI-100T01
Dynamics 365 Fundamentals - MB-900T01
CODE: WGAC-MIC-MB-900T01
Designing and Implementing Microsoft DevOps Solutions - AZ-400T00
CODE: WGAC-MIT-AZ-400T00
Designing an Azure Data Solution - DP-201T01
CODE: WGAC-MIC-DP-201T01
Designing and Implementing a Data Science Solution on Azure - DP-100T01
CODE: WGAC-MIC-DP-100T01
Designing and Implementing a Microsoft Azure AI Solution - AI-102T00
CODE: WGAC-MIC-AI-102T00
Microsoft Dynamics 365 Commerce Functional Consultant - MB-340T00
CODE: WGAC-MIC-MB-340T00
Configuring Windows Server Hybrid Advanced Services - AZ-801T00
CODE: WGAC-MIC-AZ-801T00
Migrate Open Source Data Workloads to Azure - DP-070T00
CODE: WGAC-MIC-DP-070T00
Microsoft 365 Security Administrator - MS-500T00
CODE: WGAC-MIC-MS-500T00
Configuring and Operating a Hybrid Cloud with Microsoft Azure Stack Hub - AZ-600T00
CODE: WGAC-MIC-AZ-600T00
Migrate NoSQL workloads to Azure Cosmos DB - DP-060T00
CODE: WGAC-MIC-DP-060T00
Automating Administration with PowerShell - AZ-040T00
CODE: WGAC-MIC-AZ-040T00
Installation, Storage, and Compute with Windows Server 2016 - 20740
CODE: WGAC-MIC-20740
Microsoft Teams Voice Engineer - MS-720T00
CODE: WGAC-MIC-MS-720T00
Microsoft Azure Fundamentals - AZ-900T00
CODE: WGAC-MIC-AZ-900T00
Azure Stack HCI - WS-013T00
CODE: WGAC-MIC-WS-013T00
Microsoft Dynamics 365 Field Service - MB-240T00
CODE: WGAC-MIC-MB-240T00
Administering a SQL Database Infrastructure - 20764
CODE: WGAC-MIC-20764
Power Platform App Maker - PL-100T00
CODE: WGAC-MIC-PL-100T00
Microsoft Dynamics 365 Supply Chain Management, Manufacturing - MB-320T00
CODE: WGAC-MIC-MB-320T00
Designing and Implementing Cloud-Native Applications Using Microsoft Azure Cosmos DB - DP-420T00
CODE: WGAC-MIC-DP-420T00
Designing and Implementing Microsoft DevOps solutions - AZ-400T00
CODE: WGAC-MIC-AZ-400T00
Microsoft Azure Administrator - AZ-104T00
CODE: WGAC-MIC-AZ-104T00
Microsoft Azure IoT Developer - AZ-220T00
CODE: WGAC-MIC-AZ-220T00
Microsoft Security, Compliance and Identity Fundamentals - SC-900T00
CODE: WGAC-MIC-SC-900T00
Microsoft Azure AI Fundamentals - AI-900T00
CODE: WGAC-MIC-AI-900T00
Microsoft Dynamics 365 Marketing - MB-220T00
CODE: WGAC-MIC-MB-220T00
Microsoft Azure Data Fundamentals - DP-900T00
CODE: WGAC-MIC-DP-900T00
Windows Client - MD-100T00
CODE: WGAC-MIC-MD-100T00
Microsoft 365 Fundamentals - MS-900T01
CODE: WGAC-MIC-MS-900T01
Microsoft Dynamics 365 Fundamentals Finance and Operations Apps (ERP) - MB-920T00
CODE: WGAC-MIC-MB-920T00
Microsoft Dynamics 365: Core Finance and Operations - MB-300T00
CODE: WGAC-MIC-MB-300T00
Administering Relational Databases on Microsoft Azure - DP-300T00
CODE: WGAC-MIC-DP-300T00
Planning and Administering Microsoft Azure for SAP Workloads - AZ-120T00
CODE: WGAC-MIC-AZ-120T00
Querying Data with TransactSQL - 20761
CODE: WGAC-MIC-20761
Microsoft Power BI Data Analyst - PL-300T00
CODE: WGAC-MIC-PL-300T00
Microsoft Power Platform Fundamentals - PL-900T00
CODE: WGAC-MIC-PL-900T00
Microsoft Dynamics 365 Customer Service - MB-230T01
CODE: WGAC-MIC-MB-230T01
Microsoft Security Operations Analyst - SC-200T00
CODE: WGAC-MIC-SC-200T00
Microsoft 365 Mobility and Security - MS-101T00
CODE: WGAC-MIC-MS-101T00
Microsoft Azure Architect Design - AZ-304T00
CODE: WGAC-MIC-AZ-304T00
Data Engineering on Microsoft Azure - DP-203T00
CODE: WGAC-MIC-DP-203T00
Administering Windows Server Hybrid Core Infrastructure - AZ-800T00
CODE: WGAC-MIC-AZ-800T00
Microsoft Azure Security Technologies - AZ500T00
CODE: WGAC-MIC-AZ-500T00
Microsoft Dynamics 365 Fundamentals Customer Engagement Apps (CRM) - MB-910T00
CODE: WGAC-MIC-MB-910T00
Transact-SQL Querying - DP-080T00
CODE: WGAC-MIC-DP-080T00
Microsoft Dynamics 365 Business Central Functional Consultant - MB-800T00
CODE: WGAC-MIC-MB-800T00
Managing Modern Desktops - MD-101T00
CODE: WGAC-MIC-MD-101T00
Microsoft 365 Identity and Services - MS-100T00
CODE: WGAC-MIC-MS-100T00
Microsoft Power Platform Solution Architect - PL-600T00
CODE: WGAC-MIC-PL-600T00
Microsoft Dynamics 365 Finance - MB-310T00
CODE: WGAC-MIC-MB-310T00
Managing Microsoft Teams - MS-700T00
CODE: WGAC-MIC-MS-700T00
Developing solutions for Microsoft Azure - AZ-204T00
CODE: WGAC-MIC-AZ-204T00
Implementing an Azure Data Solution - DP-200T01
CODE: WGAC-MIC-DP-200T01
Microsoft Dynamics 365 Supply Chain Management - MB-330T00
CODE: WGAC-MIC-MB-330T00
Microsoft Information Protection Administrator - SC-400T00
CODE: WGAC-MIC-SC-400T00
Microsoft Azure solutions for AWS Developers - AZ-020T00
CODE: WGAC-MIC-AZ-020T00
Power Platform Developer - PL-400T00
CODE: WGAC-MIC-PL-400T00
We use cookies to understand how you use our site and to improve your experience. To learn more, click here. Read our revised Privacy Policy and Terms and Conditions.