|
Microsoft Identity and Access Administrator (SC-300T00)
Code:
MSC-300T00
Duration:
4 Day
|
$2595
USD
|
Learn to manage tasks such as providing secure authentication and authorization access to enterprise applications. You will also learn to provide seamless experiences and self-service management capabilities for all users. Finally, learn to create adaptive access and governance of your identity and access management solutions ensuring you can troubleshoot, monitor, and report on your environment. The Identity and Access Administrator may be a single individual or a member of a larger team. Learn how this role collaborates with many other roles in the organization to drive strategic identity projects. The end goal is to provide you knowledge to modernize identity solutions, to implement hybrid identity solutions, and to implement identity governance.
Elite Total Access Collection for Microsoft
Access this course and thousands of others for only $2,999.
This course is available in the following formats:
Duration: 4 Day
Duration: 4 Day
|
Delivery Format: Virtual Classroom
|
$ 2595 |
|
|
Delivery Format: Virtual Classroom
|
$ 2595 |
|
|
Delivery Format: Virtual Classroom
|
$ 2595 |
|
|
Delivery Format: Virtual Classroom
|
$ 2595 |
|
|
Delivery Format: Virtual Classroom
|
$ 2595 |
|
|
Delivery Format: Virtual Classroom
|
$ 2595 |
|
|
Delivery Format: Virtual Classroom
|
$ 2595 |
|
|
Delivery Format: Virtual Classroom
|
$ 2595 |
Students will learn to,
- Explore identity in Microsoft Entra ID
- Implement initial configuration of Microsoft Entra ID
- Create, configure, and manage identities
- Implement and manage external identities
- Implement and manage hybrid identity
- Secure Microsoft Entra users with multifactor authentication
- Manage user authentication
- Plan, implement, and administer Conditional Access
- Manage Microsoft Entra Identity Protection
- Implement access management for Azure resources
- Plan and design the integration of enterprise apps for SSO
- Implement and monitor the integration of enterprise apps for SSO
- Implement app registration
- Plan and implement entitlement management
- Plan, implement, and manage access review
- Plan and implement privileged access
- Monitor and maintain Microsoft Entra ID
Module 1 : Explore identity in Microsoft Entra ID
- Define common identity terms and explain how they're used in the Microsoft Cloud
- Explore the common management tools and needs of an identity solution
- Review the goal of Zero Trust and how it's applied in the Microsoft Cloud
- Explore the available identity services in the Microsoft Cloud
Module 2 : Implement initial configuration of Microsoft Entra ID
- Implement initial configuration of Microsoft Entra ID
- Create, configure, and manage identities
- Implement and manage external identities (excluding B2C scenarios)
- Implement and manage hybrid identity
Module 3 : Create, configure, and manage identities
- Create, configure, and manage users
- Create, configure, and manage groups
- Manage licenses
- Explain custom security attributes and automatic user provisioning
Module 4 : Implement and manage external identities
- Manage external collaboration settings in Microsoft Entra ID
- Invite external users (individually or in bulk)
- Manage external user accounts in Microsoft Entra ID
- Configure identity providers (social and SAML/WS-fed)
Module 5 : Implement and manage hybrid identity
- Plan, design, and implement Microsoft Entra Connect
- Manage Microsoft Entra Connect
- Manage password hash synchronization (PHS)
- Manage pass-through authentication (PTA)
- Manage seamless single sign-on (seamless SSO)
- Manage federation excluding manual ADFS deployments
- Troubleshoot synchronization errors
- Implement and manage Microsoft Entra Connect Health
Module 6 : Secure Microsoft Entra users with multifactor authentication
- Learn about Microsoft Entra multifactor authentication
- Create a plan to deploy Microsoft Entra multifactor authentication
- Turn on Microsoft Entra multifactor authentication for users and specific apps
Module 7 : Manage user authentication
- Administer authentication methods (FIDO2 / Passwordless)
- Implement an authentication solution based on Windows Hello for Business
- Configure and deploy self-service password reset
- Deploy and manage password protection
- Implement and manage tenant restrictions
Module 8 : Plan, implement, and administer Conditional Access
- Plan and implement security defaults.
- Plan conditional access policies.
- Implement conditional access policy controls and assignments (targeting, applications, and conditions).
- Test and troubleshoot conditional access policies.
- Implement application controls.
- Implement session management.
- Configure smart lockout thresholds.
Module 9 : Manage Microsoft Entra Identity Protection
- Implement and manage a user risk policy
- Implement and manage sign-in risk policies
- Implement and manage MFA registration policy
- Monitor, investigate, and remediate elevated risky users
Module 10 : Implement access management for Azure resources
- Configure and use Azure roles within Microsoft Entra ID
- Configure and managed identity and assign it to Azure resources
- Analyze the role permissions granted to or inherited by a user
- Configure access to data in Azure Key Vault using RBAC-policy
Module 11 : Plan and design the integration of enterprise apps for SSO
- Discover apps by using Defender for Cloud Apps or ADFS app report.
- Design and implement access management for apps.
- Design and implement app management roles.
- Configure preintegrated (gallery) SaaS apps.
Module 12 : Implement and monitor the integration of enterprise apps for SSO
- Implement token customizations
- Implement and configure consent settings
- Integrate on-premises apps by using Microsoft Entra application proxy
- Integrate custom SaaS apps for SSO
- Implement application user provisioning
- Monitor and audit access/Sign-On to Microsoft Entra ID integrated enterprise applications
Module 13 : Implement app registration
- Plan your line of business application registration strategy
- Implement application registrations
- Configure application permissions
- Plan and configure multi-tier application permissions
Module 14 : Plan and implement entitlement management
- Define catalogs.
- Define access packages.
- Plan, implement and manage entitlements.
- Implement and manage terms of use.
- Manage the lifecycle of external users in Microsoft Entra Identity Governance settings.
Module 15 : Plan, implement, and manage access review
- Plan for access reviews
- Create access reviews for groups and apps
- Monitor the access review findings
- Manage licenses for access reviews
- Automate management tasks for access review
- Configure recurring access reviews
Module 16 : Plan and implement privileged access
- Define a privileged access strategy for administrative users (resources, roles, approvals, and thresholds)
- Configure Privileged Identity Management for Microsoft Entra roles
- Configure Privileged Identity Management for Azure resources
- Assign roles
- Manage PIM requests
- Analyze PIM audit history and reports
- Create and manage emergency access accounts
Module 17 : Monitor and maintain Microsoft Entra ID
- Analyze and investigate sign in logs to troubleshoot access issues
- Review and monitor Microsoft Entra audit logs
- Enable and integrate Microsoft Entra diagnostic logs with Log Analytics / Azure Sentinel
- Export sign in and audit logs to a third-party SIEM (security information and event management)
- Review Microsoft Entra activity by using Log Analytics / Azure Sentinel, excluding KQL (Kusto Query Language) use
- Analyze Microsoft Entra workbooks / reporting
- Configure notifications
Module 1 : Explore identity in Microsoft Entra ID
- Define common identity terms and explain how they're used in the Microsoft Cloud
- Explore the common management tools and needs of an identity solution
- Review the goal of Zero Trust and how it's applied in the Microsoft Cloud
- Explore the available identity services in the Microsoft Cloud
Module 2 : Implement initial configuration of Microsoft Entra ID
- Implement initial configuration of Microsoft Entra ID
- Create, configure, and manage identities
- Implement and manage external identities (excluding B2C scenarios)
- Implement and manage hybrid identity
Module 3 : Create, configure, and manage identities
- Create, configure, and manage users
- Create, configure, and manage groups
- Manage licenses
- Explain custom security attributes and automatic user provisioning
Module 4 : Implement and manage external identities
- Manage external collaboration settings in Microsoft Entra ID
- Invite external users (individually or in bulk)
- Manage external user accounts in Microsoft Entra ID
- Configure identity providers (social and SAML/WS-fed)
Module 5 : Implement and manage hybrid identity
- Plan, design, and implement Microsoft Entra Connect
- Manage Microsoft Entra Connect
- Manage password hash synchronization (PHS)
- Manage pass-through authentication (PTA)
- Manage seamless single sign-on (seamless SSO)
- Manage federation excluding manual ADFS deployments
- Troubleshoot synchronization errors
- Implement and manage Microsoft Entra Connect Health
Module 6 : Secure Microsoft Entra users with multifactor authentication
- Learn about Microsoft Entra multifactor authentication
- Create a plan to deploy Microsoft Entra multifactor authentication
- Turn on Microsoft Entra multifactor authentication for users and specific apps
Module 7 : Manage user authentication
- Administer authentication methods (FIDO2 / Passwordless)
- Implement an authentication solution based on Windows Hello for Business
- Configure and deploy self-service password reset
- Deploy and manage password protection
- Implement and manage tenant restrictions
Module 8 : Plan, implement, and administer Conditional Access
- Plan and implement security defaults.
- Plan conditional access policies.
- Implement conditional access policy controls and assignments (targeting, applications, and conditions).
- Test and troubleshoot conditional access policies.
- Implement application controls.
- Implement session management.
- Configure smart lockout thresholds.
Module 9 : Manage Microsoft Entra Identity Protection
- Implement and manage a user risk policy
- Implement and manage sign-in risk policies
- Implement and manage MFA registration policy
- Monitor, investigate, and remediate elevated risky users
Module 10 : Implement access management for Azure resources
- Configure and use Azure roles within Microsoft Entra ID
- Configure and managed identity and assign it to Azure resources
- Analyze the role permissions granted to or inherited by a user
- Configure access to data in Azure Key Vault using RBAC-policy
Module 11 : Plan and design the integration of enterprise apps for SSO
- Discover apps by using Defender for Cloud Apps or ADFS app report.
- Design and implement access management for apps.
- Design and implement app management roles.
- Configure preintegrated (gallery) SaaS apps.
Module 12 : Implement and monitor the integration of enterprise apps for SSO
- Implement token customizations
- Implement and configure consent settings
- Integrate on-premises apps by using Microsoft Entra application proxy
- Integrate custom SaaS apps for SSO
- Implement application user provisioning
- Monitor and audit access/Sign-On to Microsoft Entra ID integrated enterprise applications
Module 13 : Implement app registration
- Plan your line of business application registration strategy
- Implement application registrations
- Configure application permissions
- Plan and configure multi-tier application permissions
Module 14 : Plan and implement entitlement management
- Define catalogs.
- Define access packages.
- Plan, implement and manage entitlements.
- Implement and manage terms of use.
- Manage the lifecycle of external users in Microsoft Entra Identity Governance settings.
Module 15 : Plan, implement, and manage access review
- Plan for access reviews
- Create access reviews for groups and apps
- Monitor the access review findings
- Manage licenses for access reviews
- Automate management tasks for access review
- Configure recurring access reviews
Module 16 : Plan and implement privileged access
- Define a privileged access strategy for administrative users (resources, roles, approvals, and thresholds)
- Configure Privileged Identity Management for Microsoft Entra roles
- Configure Privileged Identity Management for Azure resources
- Assign roles
- Manage PIM requests
- Analyze PIM audit history and reports
- Create and manage emergency access accounts
Module 17 : Monitor and maintain Microsoft Entra ID
- Analyze and investigate sign in logs to troubleshoot access issues
- Review and monitor Microsoft Entra audit logs
- Enable and integrate Microsoft Entra diagnostic logs with Log Analytics / Azure Sentinel
- Export sign in and audit logs to a third-party SIEM (security information and event management)
- Review Microsoft Entra activity by using Log Analytics / Azure Sentinel, excluding KQL (Kusto Query Language) use
- Analyze Microsoft Entra workbooks / reporting
- Configure notifications
- Lab : Manage user roles
- Lab : Working with tenant properties
- Lab : Assigning license using group membership
- Lab : Configure external collaboration settings
- Lab : Add guest users to the directory
- Lab : Add a federated identity provider
- Lab : Add hybrid identity with Azure AD Connect
- Lab : Enable sign-in and user-risk policies
- Lab : Configure an Azure AD Multi-factor Authentication registration policy
- Lab : Use Azure Key Vault for managed identities
- Lab : Implement and test a conditional access policy
- Lab : Manage Azure AD smart lockout values
- Lab : Assign Azure resource roles in Privileged Identity Management
- Lab : Azure AD authentication for Windows and Linux virtual machines
- Lab : Enable Azure AD self-service password reset
- Lab : Enable Azure AD Multi-factor Authentication
- Lab : Defender for Cloud Apps access policies
- Lab : Register an application
- Lab : Implement access management for apps
- Lab : Grant tenant-wide admin consent to an application
- Lab : Create access reviews for internal and external users
- Lab : Manage the lifecycle of external users in Azure AD Identity Governance settings
- Lab : Add terms of use and acceptance reporting
- Lab : Create and manage a catalog of resources in Azure AD entitlement management
- Lab : Configure Privileged Identity Management (PIM) for Azure AD roles
- Lab : Explore Microsoft Sentinel and use Kusto Queries for reviewing Azure AD data sources
- Lab : Monitor and manage your security posture with Identity Secure Score
- Lab : Manage user roles
- Lab : Working with tenant properties
- Lab : Assigning license using group membership
- Lab : Configure external collaboration settings
- Lab : Add guest users to the directory
- Lab : Add a federated identity provider
- Lab : Add hybrid identity with Azure AD Connect
- Lab : Enable sign-in and user-risk policies
- Lab : Configure an Azure AD Multi-factor Authentication registration policy
- Lab : Use Azure Key Vault for managed identities
- Lab : Implement and test a conditional access policy
- Lab : Manage Azure AD smart lockout values
- Lab : Assign Azure resource roles in Privileged Identity Management
- Lab : Azure AD authentication for Windows and Linux virtual machines
- Lab : Enable Azure AD self-service password reset
- Lab : Enable Azure AD Multi-factor Authentication
- Lab : Defender for Cloud Apps access policies
- Lab : Register an application
- Lab : Implement access management for apps
- Lab : Grant tenant-wide admin consent to an application
- Lab : Create access reviews for internal and external users
- Lab : Manage the lifecycle of external users in Azure AD Identity Governance settings
- Lab : Add terms of use and acceptance reporting
- Lab : Create and manage a catalog of resources in Azure AD entitlement management
- Lab : Configure Privileged Identity Management (PIM) for Azure AD roles
- Lab : Explore Microsoft Sentinel and use Kusto Queries for reviewing Azure AD data sources
- Lab : Monitor and manage your security posture with Identity Secure Score
This course is for the Identity and Access Administrators who are planning to take the associated certification exam, or who are performing identity and access administration tasks in their day-to-day job. This course would also be helpful to an administrator or engineer that wants to specialize in providing identity solutions and access management systems for Azure-based solutions; playing an integral role in protecting an organization.
Before attending this course, students should have understanding of:
- Security best practices and industry security requirements such as defense in depth, least privileged access, shared responsibility, and zero trust model.
- Be familiar with identity concepts such as authentication, authorization, and active directory.
- Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.
- Some experience with Windows and Linux operating systems and scripting languages is helpful but not required. Course labs may use PowerShell and the CLI.
Prerequisite courses (or equivalent knowledge and hands-on experience):
This free online training will give you the experience you need to be successful in this course.
- SC-900 part 1: Describe the concepts of security, compliance, and identity - Learn | Microsoft Docs
- SC-900 part 2: Describe the capabilities of Microsoft Identity and access management solutions - Learn | Microsoft Docs
- SC-900 part 3: Describe the capabilities of Microsoft security solutions - Learn | Microsoft Docs
- SC-900 part 4: Describe the capabilities of Microsoft compliance solutions - Learn | Microsoft Docs
- AZ-104: Manage identities and governance in Azure - Learn | Microsoft Docs