Microsoft Identity and Access Administrator (SC-300) Online Course

Microsoft Identity and Access Administrator (SC-300) Online Course

This course is designed for professionals responsible for designing, implementing, and managing an organization’s identity and access solutions using Azure Active Directory (Azure AD). As a Microsoft Identity and Access Administrator, you will handle tasks such as securing authentication and authorization to enterprise applications, enabling seamless user experiences, and supporting self-service management. The role also involves implementing adaptive access controls and governance, as well as monitoring, troubleshooting, and reporting on the identity and access environment.

The course begins with configuring the initial setup of Azure Active Directory. You will then learn how to create, configure, and manage user identities, followed by implementing and managing external identities.

Who should take this Course?

The Microsoft Azure AI Fundamentals (AI-900) Online Course is ideal for beginners, students, business professionals, and IT personnel who want to gain foundational knowledge of artificial intelligence concepts and Microsoft Azure AI services. It’s also suitable for individuals preparing for the AI-900 certification exam and those looking to explore AI applications without requiring prior programming or data science experience.

Course Table of Contents

Introduction to the Course

• SC 300 - Course Introduction

Module 1 - Implement an Identify Management Solution (25-30%)

• Module 1 - Introduction
• Active Directory – Throw Back
• What is Azure Active Directory
• Who Uses Azure AD
• Azure AD Roles
• Differences Between Azure Roles and Azure AD Roles
• Capabilities of Global Admin
• Azure AD Roles - Lab Activity
• Azure AD - Custom Roles
• Custom Domains
• Deleting Custom Domains
• Bring Your Devices
• Azure AD Registered Devices
• Azure AD Join
• Azure AD Domain Join - Lab
• Azure AD - Hybrid Joined
• Azure AD - Administrative Units
• Administrative Units - Lab Activity
• Planning and Delegation - Administrative Units
• Plan for Delegation
• Security Defaults
• Create Configure and Manage Identities - Introduction
• Azure Active Directory - Users
• Azure Active Directory - Groups
• Managing Licenses
• License Requirements
• Licensing Features
• Implement and Manage External Identities - Introduction
• Azure AD B2B Collaboration
• Azure AD B2B - Lab Activity
• Azure AD External Collaboration Settings
• Dynamic Groups
• Dynamic Groups - Lab
• Azure AD B2B - Google Auth - Demo
• Implement and Manage Hybrid Identity
• Plan, Design, and Implement Azure AD Connect
• Need for AD Connect
• Selecting the Right Authentication Method
• Azure AD Password Hash Synchronization (PHS)
• Azure AD Pass Through Authentication (PTA)
• Federated Authentication
• Architecture diagrams
• Azure AD Design Considerations
• Azure AD Connect Components
• PHS - How Does it Work?
• Azure AD Connect - Lab
• Troubleshooting Sync Errors
• Data Mismatch Errors - InvalidSoftMatch
• Data Mismatch Errors - ObjectTypeMismatch
• Duplicate Attributes - AttributeValueMustBeUnique
• Data Validation Failures - IdentityDataValidationFailed
• FederatedDomainChangeError
• LargeObjects Error
• Azure AD Connect Health - Installation
• Azure AD Connect Health
• Self Remediation and Orphaned Objects
• Lab 1 - Assigning Roles to User Accounts
• Lab 2 - Tenant Properties
• Lab 3 - Assigning Licenses to Groups
• Lab 4 - External Collaboration Settings
• Lab 5 - Restoring Deleted Users
• Module 1 - Summary

Module 2 - Implement an Authentication and Access Management Solution (25-30%)

• Module 2 - Introduction
• Plan and Implement Azure Multifactor Authentication - Introduction
• What is Azure AD MFA?
• How Multi-Factor Authentication works
• Planning the MFA
• Enforcing MFA with Conditional Access
• Deciding Supported Authentication Methods
• Azure AD Authentication Methods
• Monitoring and Usage
• Manage User Authentication - Introduction
• Password Less Authentication - Introduction
• Security Usability Availability of Authentication - Methods
• Configuring Fido Key for a User - Lab
• Windows Hello for Business
• Windows Hello for Business Works - Key Points
• Azure AD Password - Protection
• Azure AD Password Protection - Lab Activity
• Multiple Forests and RODC - Considerations
• Plan, Implement, and Manage Conditional Access
• Security Defaults
• What Policies are Enforced and to Whom?
• Blocking legacy - Authentication
• Conditional Access Policies - Planning
• Conditional Access policies - Benefits
• Conditional Access policies - Components
• Conditional Access Policies - Best Practices
• Condition Access Policies - Most Common Policies
• Conditional Access Policies - Build and Test Policies
• Conditional Access Policies - Build and Test Policies - II
• Sign-in Risk and User Risk - Conditional Access Policy
• Conditional Access Policy - Blocking Locations - Lab
• Troubleshooting Using Sign-in Logs
• Device Compliance
• Conditional Access Policy - Device Compliance - Lab
• User Exclusions
• Conditional Access Policy - O365 Block MFA Required - Lab
• Test and Troubleshoot Conditional Access Policies
• Implement Application Controls and Application
• Scenario 1 - Microsoft 365 Apps Require an Approved Client
• Scenario 2 - Exchange Online and SharePoint Online
• App Protection Policies Overview
• How Can you Protect App Data-Edited
• Manage Azure AD Identity Protection - Introduction
• Manage Azure AD Identity Protection
• Risk Detection And Remediation
• Permissions
• License Requirements
• Sign-in and User Risk Policy
• Choosing Acceptable Risk Policy
• Prerequisites of Self Remediation
• Navigating Through the Reports - Lab
• Remediate Risks and Unblock Users
• User Risk Remediation Options
• Unblocking Users
• Enable Azure AD MFA - EnterpriseWide - Lab
• Deploy SSPR - Setup
• Security Defaults - Lab
• Control User Sign-in Frequency - Lab
• Smart Lockout Values
• Configuring User and Sign-in Risk Policy
• Configure Azure AD MFA Registration Policy
• Module 2 Summary

Module 3 – Implement Access Management for Apps (10-15%)

• Module 3 – Introduction and Objectives
• Microsoft Cloud App Security – CASB (Cloud Access Security Broker) Solution from Microsoft
• MCAS Architecture
• Need to Migrate to ADFS (Active Directory Federation Services)
• Discover ADFS Applications - Lab
• Design and Implement App Management Roles
• Restrict Who Can Create Applications
• Configure SaaS Based Applications
• Implement and Monitor SSO Apps - Introduction
• Token Customizations
• What is a consent
• User Consent Settings
• What is Azure Application Proxy
• How does Azure Application Proxy Work
• Comparison of Various Protocols Used by IDPs
• Implement Application User Provisioning
• Manual Versus Automatic Provisioning
• SCIM (System for Common Identity Management)
• SCIM Demonstration
• SCIM - Attribute Exchange
• Usage, Insights and Audit Reports for Enterprise Applications
• Application Registrations
• The Need to Integrate Applications with Azure AD
• What are Application Objects
• What are Service Principals
• Relation Between Application Objects and Services Principals
• Roles and Permissions Required
• Tenants - Who Can Sign-in to Your New App
• Azure Application Registrations
• Types of Permissions - Delegated and Application
• Requesting Individual User Consent
• Manifest File, Token, and Claims
• Integrate Applications with Azure AD - Lab Activity
• Troubleshooting SAML
• Module 3 - Summary

Module 4 – Plan and Implement an Identity Governance Strategy (25-30%)

• Module 4 - Introduction
• Planning and Implementing Entitlement Management - Introduction
• What is Entitlement Management
• Capabilities of Entitlement Management
• Entitlement Management - Terminology
• What Resources can I Manage with Access Packages
• How do I Control Who Gets Access
• When Should I Use Access Packages
• Plan, Implement, and Manage Access Reviews - Introduction
• Plan for Access Reviews
• What is Azure AD Identity Governance
• Access Reviews - Lab Activity
• Planning the Scope
• Components of an Access Review
• Planning Communications
• Access Reviews Lab Activity - I
• Access Reviews Lab Activity - II
• Managing Licenses for Access Reviews
• Plan and Implement Privileged Access
• Azure Active Directory Privileged Identity Management
• PIM - Stakeholders
• Principle of Least Privilege - Best Practices for PIM
• Decide the Roles that Should be Protected by PIM
• Decide What to Protect with PIM
• Assign Azure AD Roles in Privileged Identity Management - Lab Activity
• Configure PIM for Azure Resources
• Discovering Resources to Manage
• Audit History - Lab Activity
• Creating and Managing Emergency Access Accounts - I
• Creating and Managing Emergency Access Accounts - II
• Exclusions
• Validating Emergency Accounts
• Monitor and Maintain Azure AD - Introduction
• Analyze Sign-in and Troubleshoot Access Issues - Components
• Access and Licenses
• Sign-in Report - Lab Activity
• Sign in Data - More Information
• Audit Log - Users and Groups
• Exporting Logs to Third Party Security Solutions
• Integration Recommendations
• Analyze Azure AD Workbooks and Reporting
• Module 4 - Summary