SC-300 Microsoft Identity and Access Administrator Course
![](https://www.hadartraining.com/wp-content/uploads/2024/07/Certificazione-Microsoft-Identity-and-Access-Administrator-Associate.png)
The SC-300 Microsoft Identity and Access Administrator Course is a detailed training program designed for participants who want to specialize in identity and access management within Microsoft solutions. This course provides participants with a unique opportunity to deepen their knowledge and expertise in the field of cybersecurity, focusing on topics such as designing, implementing, and managing identities and access, information protection, and regulatory compliance. During the course, participants will explore the different solutions and services that Microsoft offers to ensure identity and access security, such as Microsoft Azure Active Directory and Microsoft 365. Topics such as designing and implementing identity management strategies, automating access management tasks, and protecting sensitive information will be covered.
Course Objectives
Below is a summary of the main objectives of the Microsoft Identity and Access Administrator SC-300 Course :
- Deep dive into identity and access management.
- Using Microsoft Azure Active Directory.
- Implementation of information protection strategies.
- Regulatory compliance management.
- Integration of Microsoft solutions for identity security.
- Configure and manage conditional access policies to enhance security and compliance.
- Implement and manage identity governance to ensure appropriate access lifecycle management.
- Monitor and troubleshoot identity and access issues using Microsoft security tools and services.
Course Certification
This course helps you prepare to take the:
Exam SC-300 Microsoft Identity and Access Administrator;
Course Outline
Configure and manage a Microsoft Entra tenant
- Configure and manage built-in and custom Microsoft Entra roles
- Recommend when to use administrative units
- Configure and manage administrative units
- Evaluate effective permissions for Microsoft Entra roles
- Configure and manage custom domains
- Configure Company branding settings
- Configure tenant properties, user settings, group settings, and device settings
Create, configure, and manage Microsoft Entra identities
- Create, configure, and manage users
- Create, configure, and manage groups
- Manage custom security attributes
- Automate the management of users and groups by using PowerShell
- Assign, modify, and report on licenses
Implement and manage identities for external users and tenants
- Manage External collaboration settings in Microsoft Entra ID
- Invite external users, individually or in bulk
- Manage external user accounts in Microsoft Entra ID
- Implement Cross-tenant access settings
- Implement and manage cross-tenant synchronization
- Configure identity providers, including SAML and WS-Fed
- Create and manage a Microsoft Entra B2C tenant (Microsoft Entra External ID)
Implement and manage hybrid identity
- Implement and manage Microsoft Entra Connect
- Implement and manage Microsoft Entra Connect cloud sync
- Implement and manage password hash synchronization
- Implement and manage pass-through authentication
- Implement and manage seamless single sign-on (SSO)
- Implement and manage federation, excluding manual Active Directory Federation Services (AD FS) deployments
- Implement and manage Microsoft Entra Connect Health
- Troubleshoot synchronization errors
Plan, implement, and manage Microsoft Entra ID user authentication
- Plan for authentication
- Implement and manage authentication methods
- Implement and manage tenant-wide Multi-factor Authentication (MFA) settings
- Manage per-user MFA settings
- Configure and deploy self-service password reset (SSPR)
- Implement and manage Windows Hello for Business
- Disable accounts and revoke user sessions
- Implement and manage password protection and smart lockout
- Enable Microsoft Entra Kerberos authentication for hybrid identities
- Implement certificate-based authentication in Microsoft Entra
Plan, implement, and manage Microsoft Entra Conditional Access
- Plan Conditional Access policies
- Implement Conditional Access policy assignments
- Implement Conditional Access policy controls
- Test and troubleshoot Conditional Access policies
- Implement session management
- Implement device-enforced restrictions
- Implement continuous access evaluation
- Create a Conditional Access policy from a template
Manage risk by using Microsoft Entra Identity Protection
- Implement and manage user risk policies
- Implement and manage sign-in risk policies
- Implement and manage MFA registration policies
- Monitor, investigate and remediate risky users
- Monitor, investigate, and remediate risky workload identities
Implement access management for Azure resources by using Azure roles
- Create custom Azure roles, including both control plane and data plane permissions
- Assign built-in and custom Azure roles
- Evaluate effective permissions for a set of Azure roles
- Assign Azure roles to enable Microsoft Entra ID login to Azure virtual machines
- Configure Azure Key Vault role-based access control (RBAC) and access policies
Plan and implement identities for applications and Azure workloads
- Select appropriate identities for applications and Azure workloads, including managed identities, service principals, user accounts, and managed service accounts
- Create managed identities
- Assign a managed identity to an Azure resource
- Use a managed identity assigned to an Azure resource to access other Azure resources
Plan, implement, and monitor the integration of enterprise applications
- Configure and manage user and admin consent
- Discover apps by using AD FS application activity reports
- Plan and implement settings for enterprise applications, including application-level and tenant-level settings
- Assign appropriate Microsoft Entra roles to users to manage enterprise applications
- Monitor and audit activity in enterprise applications
- Design and implement integration for on-premises apps by using Microsoft Entra Application Proxy
- Design and implement integration for software as a service (SaaS) apps
- Assign, classify, and manage users, groups, and app roles for enterprise applications
- Create and manage application collections
Plan and implement app registrations
- Plan for app registrations
- Create app registrations
- Configure app authentication
- Configure API permissions
- Create app roles
Manage and monitor app access by using Microsoft Defender for Cloud Apps
- Configure and analyze cloud discovery results by using Defender for Cloud Apps
- Configure connected apps
- Implement application-enforced restrictions
- Configure Conditional Access app control
- Create access and session policies in Defender for Cloud Apps
- Implement and manage policies for OAuth apps
- Manage the Cloud app catalog
Plan and implement entitlement management in Microsoft Entra
- Plan entitlements
- Create and configure catalogs
- Create and configure access packages
- Manage access requests
- Implement and manage terms of use (ToU)
- Manage the lifecycle of external users
- Configure and manage connected organizations
Plan, implement, and manage access reviews in Microsoft Entra
- Plan for access reviews
- Create and configure access reviews
- Monitor access review activity
- Manually respond to access review activity
Plan and implement privileged access
- Plan and manage Azure roles in Microsoft Entra Privileged Identity Management (PIM), including settings and assignments
- Plan and manage Azure resources in PIM, including settings and assignments
- Plan and configure privileged access groups
- Manage the PIM request and approval process
- Analyze PIM audit history and reports
- Create and manage break-glass accounts
Monitor identity activity by using logs, workbooks, and reports
- Design a strategy for monitoring Microsoft Entra
- Review and analyze sign-in, audit, and provisioning logs by using the Microsoft Entra admin center
- Configure diagnostic settings, including configuring destinations such as Log Analytics workspaces, storage accounts, and event hubs
- Monitor Microsoft Entra by using KQL queries in Log Analytics
- Analyze Microsoft Entra by using workbooks and reporting
- Monitor and improve the security posture by using Identity Secure Score
Plan and implement Microsoft Entra Permissions Management
- Onboard Azure subscriptions to Permissions Management
- Evaluate and remediate risks relating to Azure identities, resources, and tasks
- Evaluate and remediate risks relating to Azure highly privileged roles
- Evaluate and remediate risks relating to Permissions Creep Index (PCI) in Azure
- Configure activity alerts and triggers for Azure subscriptions
Course Mode
Instructor-Led Remote Live Classroom Training;
Trainers
Trainers are authorized Instructors in Microsoft and certified in other IT technologies, with years of hands-on experience in the industry and in Training.
Lab Topology
For all types of delivery, the participant can access the equipment and actual systems in our laboratories or directly in international data centers remotely, 24/7. Each participant has access to implement various configurations, Thus immediately applying the theory learned. Below are some scenarios drawn from laboratory activities.
![](https://www.hadartraining.com/wp-content/uploads/2024/07/Corso-Microsoft-Identity-and-Access-Administrator-SC-300.png)
Course Details
Course Prerequisites
- Attendance at the Microsoft Security, Compliance, and Identity Fundamentals Course (SC-900) is recommended .
Course Duration
Intensive duration 4 days;
Course Frequency
Course Duration: 4 days (9.00 to 17.00) - Ask for other types of attendance.
Course Date
- Developing solutions for Microsoft 365 core services course (Intensive Formula) – On request – 09:00 – 17:00
Steps to Enroll
Registration takes place by asking to be contacted from the following link, or by contacting the office at the international number +355 45 301 313 or by sending a request to the email info@hadartraining.com