SC 300T00 Microsoft Identity and Access Administrator

Module 1: Implement an identity management solution

• Implement Initial configuration of Azure AD
• Create, configure, and manage identities
• Implement and manage external identities
• Implement and manage hybrid identity

LAB:

• Manage user roles
• Setting tenant-wide properties
• Assign licenses to users
• Restore or remove deleted users
• Add groups in Azure AD
• Change group license assignments
• Change user license assignments
• Configure external collaboration
• Add guest users to the directory

Module 2: Implement an authentication and access management solution

• Secure Azure AD user with MFA
• Manage user authentication
• Plan, implement, and administer conditional access
• Manage Azure AD identity protection

LAB:

• Enable Azure AD MFA
• Configure and deploy self-service password reset (SSPR)
• Work with security defaults
• Implement conditional access policies, roles, and assignments
• Configure authentication session controls
• Manage Azure AD smart lockout values
• Enable sign-in risk policy
• Configure Azure AD MFA authentication registration policy

Module 3: Implement access management for Apps

• Plan and design the integration of enterprise for SSO
• Implement and monitor the integration of enterprise apps for SSO
• Implement app registration

LAB:

• Implement access management for apps
• Create a custom role to management app registration
• Register an application
• Grant tenant-wide admin consent to an application
• Add app roles to applications and recieve tokens

Module 4: Plan and implement an identity governancy strategy

• Plan and implement entitlement management
• Plan, implement, and manage access reviews
• Plan and implement privileged access
• Monitor and maintain Azure AD

Lab:

• Creat and manage a resource catalog with Azure AD entitlement
• Add terms of use acceptance report
• Manage the lifecycle of external users with Azure AD identity governance
• Create access reviews for groups and apps
• Configure PIM for Azure AD roles
• Assign Azure AD role in PIM
• Assign Azure resource roles in PIM
• Connect data from Azure AD to Azure Sentinel