Back

Information Technology

SC-300T00 Microsoft Identity and Access Administrator

Instructor-Led 17 Agenda

What You'll Learn

Deploy an initial Azure AD with custom settings

Manage both internal and external identities

Implement a hybrid identity solution

Configure and manage user authentication including MFA

Control access to resources using conditional access

Use Azure AD Identity Protection to protect your organization

Plan and implement SSO for enterprise application

Monitor and maintain enterprise applications

Manage and maintain Azure AD from creation to solution

Use access reviews to maintain your Azure AD

Grant access to users with entitlement management

Description

The Microsoft Identity and Access Administrator course explores how to design, implement, and operate an organization’s identity and access management systems by using Microsoft Entra ID. Learn to manage tasks such as providing secure authentication and authorization access to enterprise applications. You will also learn to provide seamless experiences and self-service management capabilities for all users. Finally, learn to create adaptive access and governance of your identity and access management solutions ensuring you can troubleshoot, monitor, and report on your environment. The Identity and Access Administrator may be a single individual or a member of a larger team. Learn how this role collaborates with many other roles in the organization to drive strategic identity projects. The

Who Should Attend

This course is for the Identity and Access Administrators who are planning to take the associated certification exam, or who are performing identity and access administration tasks in their day-to-day job. This course would also be helpful to an administrator or engineer that wants to specialize in providing identity solutions and access management systems for Azure-based solutions; playing an integral role in protecting an organization.

Course Overview

Course Agenda

17 Title

Course Agenda 17

Lesson Id	Title	Description
1	Explore identity in Microsoft Entra ID	Explain the identity landscape<br />Explore zero trust with identity<br />Discuss identity as a control plane<br />Explore why we have identity<br />Define identity administration<br />Contrast decentralized identity with central identity systems<br />Discuss identity management solutions<br />Explain Microsoft Entra Business to Business<br />Compare Microsoft identity providers<br />Define identity licensing<br />Explore authentication<br />Discuss authorization<br />Explain auditing in identity
2	Implement initial configuration of Microsoft Entra ID	Configure company brand<br />Configure and manage Microsoft Entra roles<br />Configure delegation by using administrative units<br />Analyze Microsoft Entra role permissions<br />Configure and manage custom domains<br />Configure tenant-wide setting
3	Create, configure, and manage identities	Create, configure, and manage users<br />Create, configure, and manage groups<br />Configure and manage device registration<br />Manage licenses<br />Create custom security attributes<br />Explore automatic user creation
4	Implement and manage external identities	Describe guest access and Business to Business accounts<br />Manage external collaboration<br />Invite external users - individually and in bulk<br />Demo - manage guest users in Microsoft Entra ID<br />Manage external user accounts in Microsoft Entra ID<br />Manage external users in Microsoft 365 workloads<br />Implement and manage Microsoft Entra Verified ID<br />Configure identity providers<br />Implement cross-tenant access controls
5	Implement and manage hybrid identity	Plan, design, and implement Microsoft Entra Connect<br />Implement manage password hash synchronization (PHS)<br />Implement manage pass-through authentication (PTA)<br />Demo - Manage pass-through authentication and seamless single sign-on (SSO)<br />Implement and manage federation<br />Trouble-shoot synchronization errors<br />Implement Microsoft Entra Connect Health<br />Manage Microsoft Entra Health
6	Secure Microsoft Entra users with multifactor authentication	What is Microsoft Entra multifactor authentication?<br />Plan your multifactor authentication deployment<br />Configure multi-factor authentication methods
7	Manage user authentication	Administer FIDO2 and passwordless authentication methods<br />Explore Authenticator app and OATH tokens<br />Implement an authentication solution based on Windows Hello for Business<br />Deploy and manage password protection<br />Configure smart lockout thresholds<br />Implement Kerberos and certificate-based authentication in Microsoft Entra ID<br />Configure Microsoft Entra user authentication for virtual machines
8	Plan, implement, and administer Conditional Access	Plan security defaults<br />Plan Conditional Access policies<br />Implement Conditional Access policy controls and assignments<br />Test and troubleshoot Conditional Access policies<br />Implement application controls<br />Implement session management<br />Implement continuous access evaluation
9	Manage Microsoft Entra Identity Protection	Review identity protection basics<br />Implement and manage user risk policy<br />Monitor, investigate, and remediate elevated risky users<br />Implement security for workload identities<br />Explore Microsoft Defender for Identity
10	Implement access management for Azure resources	Assign Azure roles<br />Configure custom Azure roles<br />Create and configure managed identities<br />Access Azure resources with managed identities<br />Analyze Azure role permissions<br />Configure Azure Key Vault RBAC policies<br />Retrieve objects from Azure Key Vault<br />Explore Microsoft Entra Permissions Management
11	Plan and design the integration of enterprise apps for SSO	Discover apps by using Microsoft Defender for Cloud Apps and Active Directory Federation Services app report<br />Configure connectors to apps<br />Design and implement app management roles<br />Configure preintegrated gallery SaaS apps<br />Implement and manage policies for OAuth apps
12	Implement and monitor the integration of enterprise apps for SSO	Implement token customizations<br />Implement and configure consent settings<br />Integrate on-premises apps with Microsoft Entra application proxy<br />Integrate custom SaaS apps for single sign-on<br />Implement application-based user provisioning<br />Monitor and audit access to Microsoft Entra integrated enterprise applications<br />Create and manage application collections
13	Implement app registration	Plan your line of business application registration strategy<br />Implement application registration<br />Register an application<br />Configure permission for an application<br />Grant tenant-wide admin consent to applications<br />Implement application authorization<br />Manage and monitor application by using app governance
14	Plan and implement entitlement management	Define access packages<br />Configure entitlement management<br />Configure and manage connected organizations<br />Review per-user entitlements
15	Plan, implement, and manage access review	Plan for access reviews<br />Create access reviews for groups and apps<br />Create and configure access review programs<br />Monitor access review findings<br />Automate access review management tasks<br />Configure recurring access reviews
16	Plan and implement privileged access	Define a privileged access strategy for administrative users<br />Configure Privileged Identity Management for Azure resources<br />Plan and configure Privileged Access Groups<br />Analyze Privileged Identity Management audit history and reports<br />Create and manage emergency access accounts
17	Monitor and maintain Microsoft Entra ID	Analyze and investigate sign-in logs to troubleshoot access issues<br />Review and monitor Microsoft Entra audit logs<br />Export logs to third-party security information and event management system<br />Analyze Microsoft Entra workbooks and reporting<br />Monitor security posture with Identity Secure Score

Explore identity in Microsoft Entra ID

Explain the identity landscape
Explore zero trust with identity
Discuss identity as a control plane
Explore why we have identity
Define identity administration
Contrast decentralized identity with central identity systems
Discuss identity management solutions
Explain Microsoft Entra Business to Business
Compare Microsoft identity providers
Define identity licensing
Explore authentication
Discuss authorization
Explain auditing in identity

Implement initial configuration of Microsoft Entra ID

Configure company brand
Configure and manage Microsoft Entra roles
Configure delegation by using administrative units
Analyze Microsoft Entra role permissions
Configure and manage custom domains
Configure tenant-wide setting

Create, configure, and manage identities

Create, configure, and manage users
Create, configure, and manage groups
Configure and manage device registration
Manage licenses
Create custom security attributes
Explore automatic user creation

Implement and manage external identities

Describe guest access and Business to Business accounts
Manage external collaboration
Invite external users - individually and in bulk
Demo - manage guest users in Microsoft Entra ID
Manage external user accounts in Microsoft Entra ID
Manage external users in Microsoft 365 workloads
Implement and manage Microsoft Entra Verified ID
Configure identity providers
Implement cross-tenant access controls

Implement and manage hybrid identity

Plan, design, and implement Microsoft Entra Connect
Implement manage password hash synchronization (PHS)
Implement manage pass-through authentication (PTA)
Demo - Manage pass-through authentication and seamless single sign-on (SSO)
Implement and manage federation
Trouble-shoot synchronization errors
Implement Microsoft Entra Connect Health
Manage Microsoft Entra Health

Secure Microsoft Entra users with multifactor authentication

What is Microsoft Entra multifactor authentication?
Plan your multifactor authentication deployment
Configure multi-factor authentication methods

Manage user authentication

Administer FIDO2 and passwordless authentication methods
Explore Authenticator app and OATH tokens
Implement an authentication solution based on Windows Hello for Business
Deploy and manage password protection
Configure smart lockout thresholds
Implement Kerberos and certificate-based authentication in Microsoft Entra ID
Configure Microsoft Entra user authentication for virtual machines

Plan, implement, and administer Conditional Access

Plan security defaults
Plan Conditional Access policies
Implement Conditional Access policy controls and assignments
Test and troubleshoot Conditional Access policies
Implement application controls
Implement session management
Implement continuous access evaluation

Manage Microsoft Entra Identity Protection

Review identity protection basics
Implement and manage user risk policy
Monitor, investigate, and remediate elevated risky users
Implement security for workload identities
Explore Microsoft Defender for Identity

Implement access management for Azure resources

Assign Azure roles
Configure custom Azure roles
Create and configure managed identities
Access Azure resources with managed identities
Analyze Azure role permissions
Configure Azure Key Vault RBAC policies
Retrieve objects from Azure Key Vault
Explore Microsoft Entra Permissions Management

Plan and design the integration of enterprise apps for SSO

Discover apps by using Microsoft Defender for Cloud Apps and Active Directory Federation Services app report
Configure connectors to apps
Design and implement app management roles
Configure preintegrated gallery SaaS apps
Implement and manage policies for OAuth apps

Implement and monitor the integration of enterprise apps for SSO

Implement token customizations
Implement and configure consent settings
Integrate on-premises apps with Microsoft Entra application proxy
Integrate custom SaaS apps for single sign-on
Implement application-based user provisioning
Monitor and audit access to Microsoft Entra integrated enterprise applications
Create and manage application collections

Implement app registration

Plan your line of business application registration strategy
Implement application registration
Register an application
Configure permission for an application
Grant tenant-wide admin consent to applications
Implement application authorization
Manage and monitor application by using app governance

Plan and implement entitlement management

Define access packages
Configure entitlement management
Configure and manage connected organizations
Review per-user entitlements

Plan, implement, and manage access review

Plan for access reviews
Create access reviews for groups and apps
Create and configure access review programs
Monitor access review findings
Automate access review management tasks
Configure recurring access reviews

Plan and implement privileged access

Define a privileged access strategy for administrative users
Configure Privileged Identity Management for Azure resources
Plan and configure Privileged Access Groups
Analyze Privileged Identity Management audit history and reports
Create and manage emergency access accounts

Monitor and maintain Microsoft Entra ID