Course Overview

This Microsoft Identity and Access Administrator certification training course from CloudThat teaches candidates how to design, implement, and operate an organization’s identity and access management systems using Azure Active Directory (Azure AD). Candidates taking up this Azure SC-300 course also learn how to secure authentication and authorization access to enterprise applications and provide seamless experiences and self-service management capabilities to all users. An Identity and Access Administrator Associate is also responsible for monitoring, troubleshooting, and reporting on the identity and access environment.

 

After completing this course, students will be able to:

  • Implement an identity management solution
  • Implement an authentication and access management solutions
  • Implement access management for apps
  • Plan and implement an identity governance strategy

Upcoming Batches

India Online Enroll
Start Date End Date

To be Decided

Key Features

  • Our Microsoft SC-300 training modules have 50% -60% hands-on lab sessions to encourage Thinking-Based Learning (TBL).
  • Interactive-rich virtual and face-to-face classroom teaching to inculcate Problem-Based Learning (PBL).
  • Microsoft certified instructor-led training and mentoring sessions to develop Competency-Based Learning (CBL).
  • Well-structured use-cases to simulate challenges encountered in a Real-World environment.
  • Integrated teaching assistance and support through experts designed Learning Management System (LMS) and ExamReady platform.
  • Being a Microsoft Learning Partner provides us with the edge over competition.

Who Should Attend

  • The Microsoft Identity and Access Administrator designs, implements, and operates an organization’s identity and access management systems by using Azure AD. They manage tasks such as providing secure authentication and authorization access to enterprise applications. The administrator provides seamless experiences and self-service management capabilities for all users. Adaptive access and governance are core elements to the role. This role is also responsible for troubleshooting, monitoring, and reporting for the identity and access environment. The Identity and Access Administrator may be a single individual or a member of a larger team. This role collaborates with many other roles in the organization to drive strategic identity projects to modernize identity solutions, to implement hybrid identity solutions and to implement identity governance.

Prerequisites

  • Security best practices and industry security requirements such as defense in depth, least privileged access, shared responsibility, and zero trust model.
  • Be familiar with identity concepts such as authentication, authorization, and active directory.
  • Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.
  • Some experience with Windows and Linux operating systems and scripting languages is helpful but not required. Course labs may use PowerShell and the CLI.

Course Outline Download Course Outline

Implement initial configuration of Azure Active Directory

  • configure and manage Azure AD directory roles
  • configure and manage custom domains
  • configure and manage device registration options
  • configure and manage device registration options
  • configure delegation by using administrative units
  • configure tenant-wide settings

Create, configure and manage identities

  • create, configure and manage users
  • create, configure and manage groups
  • manage licenses

Implement and manage external identities

  • manage external collaboration settings in Azure Active Directory
  • invite external users (individually or in bulk)
  •  manage external user accounts in Azure Active Directory
  • configure identity providers (social and SAML/WS-fed)

Implement and manage hybrid identity

  • implement and manage Azure Active Directory Connect (AADC)
  • implement and manage Azure AD Connect cloud sync
  • implement and manage Password Hash Synchronization (PHS)
  • implement and manage Pass-Through Authentication (PTA)
  • implement and manage seamless Single Sign-On (SSO)
  • implement and manage Federation (excluding manual ADFS deployments)
  • implement and manage Azure Active Directory Connect Health
  • troubleshoot synchronization errors

Plan and implement Azure Multifactor Authentication (MFA)

  • plan Azure MFA deployment (excluding MFA Server)
  • implement and manage Azure MFA settings
  • manage MFA settings for users

Manage user authentication

  • administer authentication methods (FIDO2 / Passwordless)
  •  implement an authentication solution based on Windows Hello for Business
  • configure and deploy self-service password reset
  • deploy and manage password protection
  • implement and manage tenant restrictions

Plan, implement and administer conditional access

  • plan and implement security defaults
  • plan conditional access policies
  • implement conditional access policy controls and assignments (targeting, applications, and conditions)
  • testing and troubleshooting conditional access policies
  • implement application controls
  • implement session management
  • configure smart lockout thresholds

Manage Azure AD Identity Protection

  • implement and manage a user risk policy
  • implement and manage sign-in risk policies
  • implement and manage MFA registration policy
  • monitor, investigate and remediate elevated risky users

Plan, implement, and monitor the integration of Enterprise Apps for SSO

  • implement and configure consent settings
  • discover apps by using MCAS or ADFS app report
  • design and implement access management for apps
  • design and implement app management roles
  • monitor and audit access / Sign-Ons to Azure Active Directory integrated enterprise applications
  • integrate on-premises apps by using Azure AD application proxy
  • integrate custom SaaS apps for SSO configure pre-integrated (gallery) SaaS apps
  • implement application user provisioning

Implement app registrations

  • plan your line of business application registration strategy
  • implement application registrations
  • configure application permissions
  • implement application authorization
  • plan and configure multi-tier application permissions

Plan and implement entitlement management

  • define catalogs
  • define access packages
  • plan, implement and manage entitlements
  • implement and manage terms of use
  • manage the lifecycle of external users in Azure AD Identity Governance settings

Plan, implement and manage access reviews

  • plan for access reviews
  • create access reviews for groups and apps
  • monitor access review findings
  • manage licenses for access reviews
  • automate access review management tasks
  • configure recurring access reviews

Plan and implement privileged access 

  • define a privileged access strategy for administrative users (resources, roles, approvals, thresholds)
  • configure Privileged Identity Management for Azure AD roles
  • configure Privileged Identity Management for Azure resources
  • assign roles
  • manage PIM requests
  • analyze PIM audit history and reports
  • create and manage break-glass accounts

Monitor and maintain Azure Active Directory

  • analyze and investigate sign-in logs to troubleshoot access issues
  • review and monitor Azure AD audit logs
  • enable and integrate Azure AD diagnostic logs with Log Analytics / Azure Sentinel
  • export sign-in and audit logs to a third-party SIEM
  • review Azure AD activity by using Log Analytics / Azure Sentinel, excluding KQL use
  • analyze Azure Active Directory workbooks / reporting
  • configure notifications

Certification

    • By earning SC-300 Azure certification, you can be competent of threat management, monitoring, and response by using a variety of security solutions.
    • Demonstrate skills to use tools like Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender.
    • On successful completion of Microsoft SC-300 exam training, aspirants receive a Course Completion Certificate from us.
    • By successfully clearing the SC-300 exam, aspirants earn Microsoft Certification.

Click to Zoom

Our Top Trainers

Course Fee

Select Course date

Add to Wishlist

Course ID: 8831

Course Price at

₹ 29900 + 18% GST

Enroll Now
Enquire Now