SC-300T00 – Microsoft Identity and Access Administrator

• Define common identity terms and explain how they are used in the Microsoft Cloud
• Explore the common management tools and needs of an identity solution
• Review the goal of Zero Trust and how it is applied in the Microsoft Cloud
• Explore the available identity services in the Microsoft Cloud
• Implement initial configuration of Azure Active Directory
• Create, configure, and manage identities
• Implement and manage external identities (excluding B2C scenarios)
• Implement and manage hybrid identity
• Create, configure, and manage users
• Create, configure, and manage groups
• Manage licenses
• Explain custom security attributes and automatic user provisioning
• Manage external collaboration settings in Azure Active Directory
• Invite external users (individually or in bulk)
• Manage external user accounts in Azure Active Directory
• Configure identity providers (social and SAML/WS-fed)
• Plan, design, and implement Azure Active Directory Connect (AADC)
• Manage Azure Active Directory Connect (AADC)
• Manage password hash synchronization (PHS)
• Manage pass-through authentication (PTA)
• Manage Seamless Single Sign-On (Seamless SSO)
• Manage federation excluding manual ADFS deployments
• Troubleshoot synchronization errors
• Implement and manage Azure Active Directory Connect Health
• Learn about Azure AD Multi-Factor Authentication (Azure AD MFA)
• Create a plan to deploy Azure AD MFA
• Turn on Azure AD MFA for users and specific apps
• Administer authentication methods (FIDO2 / Passwordless)
• Implement an authentication solution based on Windows Hello for Business
• Configure and deploy self-service password reset
• Deploy and manage password protection
• Implement and manage tenant restrictions
• Plan and implement security defaults.
• Plan conditional access policies.
• Implement conditional access policy controls and assignments (targeting, applications, and conditions).
• Test and troubleshoot conditional access policies.
• Implement application controls.Implement session management.
• Configure smart lockout thresholds.
• Implement and manage a user risk policy
• Implement and manage sign-in risk policies
• Implement and manage MFA registration policy
• Monitor, investigate, and remediate elevated risky users
• Configure and use Azure roles within Azure AD
• Configure and managed identity and assign it to Azure resources
• Analyze the role permissions granted to or inherited by a user
• Configure access to data in Azure Key Vault using RBAC-policy
• Discover apps by using MCAS or ADFS app report.
• Design and implement access management for apps.
• Design and implement app management roles.
• Configure pre-integrated (gallery) SaaS apps.
• Implement token customizations
• Implement and configure consent settings
• Integrate on-premises apps by using Azure AD application proxy
• Integrate custom SaaS apps for SSO
• Implement application user provisioning
• Monitor and audit access/Sign-On to Azure Active Directory integrated enterprise applications
• Plan your line of business application registration strategy
• Implement application registrations
• Configure application permissions
• Plan and configure multi-tier application permissions
• Define catalogs.
• Define access packages.
• Plan, implement and manage entitlements.
• Implement and manage terms of use.
• Manage the lifecycle of external users in Azure AD Identity Governance settings.
• Plan for access reviews
• Create access reviews for groups and apps
• Monitor the access review findings
• Manage licenses for access reviews
• Automate management tasks for access review
• Configure recurring access reviews
• Define a privileged access strategy for administrative users (resources, roles, approvals, and thresholds)
• Configure Privileged Identity Management for Azure AD roles
• Configure Privileged Identity Management for Azure resources
• Assign roles
• Manage PIM requests
• Analyze PIM audit history and reports
• Create and manage emergency access accounts
• Analyze and investigate sign in logs to troubleshoot access issues
• Review and monitor Azure AD audit logs
• Enable and integrate Azure AD diagnostic logs with Log Analytics / Azure Sentinel
• Export sign in and audit logs to a third-party SIEM (security information and event management)
• Review Azure AD activity by using Log Analytics / Azure Sentinel, excluding KQL (Kusto Query
• Language) use
• Analyze Azure Active Directory workbooks / reporting
• Configure notifications

1.Explore identity and Azure AD

This module will cover definitions and available services for identity provided in Azure AD to Microsoft 365. You start with authentication, authorization, and access tokens then build into full identity solutions.

Click here to know more  details

2.Implement initial configuration of Azure Active Directory

Learn to create an initial Azure Active Directory configuration to ensure all the identity solutions available in Azure are ready to use. This module explores how to build and configure an Azure AD system.

Click here to know more details

3.Create, configure, and manage identities

Access to cloud-based workloads needs to be controlled centrally by providing a definitive identity for each user and resource. You can ensure employees and vendors have just-enough access to do their job.

Click here to know more details

4.Implement and manage external identities

Inviting external users to use company Azure resources is a great benefit, but you want to do it in a secure way. Explore how to enable secure external collaboration.

Click here to know more details

5.Implement and manage hybrid identity

Creating a hybrid-identity solution to use your on-premises active directory can be challenging. Explore how to implement a secure hybrid-identity solution.

Click here to know more details

6.Secure Azure Active Directory users with Multi-Factor Authentication

Learn how to use multi-factor authentication with Azure AD to harden your user accounts.

Click here to know more details

7.Manage user authentication

There are multiple options for authentication in Azure AD. Learn how to implement and manage the right authentications for users based on business needs.

Click here to know more details

8.Plan, implement, and administer Conditional Access

Conditional Access gives a fine granularity of control over which users can do specific activities, access which resources, and how to ensure data and systems are safe.

Click here to know more details

9.Manage Azure AD Identity Protection

Protecting a user’s identity by monitoring their usage and sign-in patterns will ensure a secure cloud solution. Explore how to design and implement Azure AD Identity protection.

Click here to know more details

10.Implement access management for Azure resources

Explore how to use built-in Azure roles, managed identities, and RBAC-policy to control access to Azure resources. Identity is the key to secure solutions.

Click here to know more details

11.Plan and design the integration of enterprise apps for SSO

Enterprise app deployment enables control over which users can access the apps, easily log into apps with single-sign-on, and provide integrated usage reports.

Click here to know more details

12.Implement and monitor the integration of enterprise apps for SSO

Deploying and monitoring enterprise applications to Azure solutions can ensure security. Explore how to deploy on-premises and cloud based apps to users.

Click here to know more details

13.Implement app registration

Line of business developed in-house need registration in Azure AD and assigned to users for a secure Azure solution. Explore how to implement app registration.

Click here to know more details

14.Plan and implement entitlement management

When new users or external users join your site, quickly assigning them access to Azure solutions is a must. Explore how to entitle users to access your site and resources.

Click here to know more details

15.Plan, implement, and manage access review

Once identity is deployed, proper governance using access reviews is necessary for a secure solution. Explore how to plan for and implement access reviews.

Click here to know more details

16.Plan and implement privileged access

Ensuring that administrative roles are protected and managed to increase your Azure solution security is a must. Explore how to use PIM to protect your data and resources.

Click here to know more details

17.Monitor and maintain Azure Active Directory

Azure AD audit and diagnostic logs provide a rich view into how users are accessing your Azure solution. Learn to monitor, troubleshoot, and analyze sign-in data.

Click here to know more details

This course is for the Identity and Access Administrators who are planning to take the associated certification exam, or who are performing identity and access administration tasks in their day-to-day job. This course would also be helpful to an administrator or engineer that wants to specialize in providing identity solutions and access management systems for Azure-based solutions; playing an integral role in protecting an organization.

Before attending this course, students should have an understanding of:

• Security best practices and industry security requirements such as defense in depth, least privileged
• access, shared responsibility, and zero trust model.
• Be familiar with identity concepts such as authentication, authorization, and active directory.
• Have some experience deploying Azure workloads. This course does not cover the basics of Azure
• administration, instead, the course content builds on that knowledge by adding security-specific
• information.
• Some experience with Windows and Linux operating systems and scripting languages is helpful but not
• required. Course labs may use PowerShell and the CLI.

Prerequisite courses (or equivalent knowledge and hands-on experience):

This free online training will give you the experience you need to be successful in this course.

Skills Measured

• Implement identities in Azure AD (20–25%)
• Implement authentication and access management (25–30%)
• Implement access management for applications (15–20%)
• Plan and implement identity governance in Azure AD (20–25%)

• Career growth
• Broad Career opportunities
• Worldwide recognition from leaders
• Up-to Date technical skills
• Popular Certification Badges

 

 

 

 

 

 

To be added