SC-300 : Microsoft Identity and Access Administrator

Dive into Azure Security with this comprehensive course, designed to equip you with practical skills for protecting your cloud environment. Learn the right way to navigate cloud security challenges and build a strong foundation for enterprise security. This course offers in-depth lab exercises and a structured curriculum, preparing you for both Azure certifications and real-world Azure administration.

What You Will Learn:

• Initial Configuration of Azure Active Directory (Azure AD): Master the fundamentals of Azure AD setup, including configuring directory roles, managing custom domains, and setting up device registration.
• Identity Management: Gain expertise in creating, configuring, and managing users and groups, handling licenses, and enabling external collaboration with social and SAML/WS-Fed identity providers.
• Hybrid Identity and Synchronization: Learn to set up and manage Azure AD Connect (AADC), implement password synchronization methods (PHS, PTA, Seamless SSO), and utilize Azure AD Connect Health for troubleshooting.
• Multifactor Authentication (MFA): Plan and implement Azure MFA to enhance security, manage user settings, and enforce password protection and self-service password reset.
• Authentication and Access Controls: Implement modern authentication methods like FIDO2, passwordless, and Windows Hello for Business. Configure tenant restrictions, smart lockout policies, and Conditional Access policies for granular control.
• Identity Protection: Develop strategies for managing user and sign-in risk, investigate risky activities, and enforce MFA registration policies.
• Enterprise Application Integration and SSO: Discover and manage enterprise applications, integrate on-premises apps using Azure AD Application Proxy, and configure SSO for SaaS applications.
• Application Registration and Authorization: Develop a robust application registration strategy, configure application permissions, and manage authorization effectively.
• Entitlement Management and Access Reviews: Define catalogs and access packages, manage external user lifecycles, automate access reviews, and monitor review findings and license usage.
• Privileged Access Management (PIM): Define strategies for managing administrative users, configure Azure AD Privileged Identity Management (PIM), assign roles, manage PIM requests, and review audit logs.
• Monitoring and Integration: Analyze and troubleshoot using sign-in and audit logs, enable diagnostics with Log Analytics and Azure Sentinel, and export logs to third-party SIEMs. Utilize Azure AD Workbooks and alerts for analysis.

Course Update Notes:

• October 20th, 2023: Modules 3 and 4 updated.
• October 28th, 2021: All modules updated.
• November 29th, 2021: New lab activities uploaded.
• March 16th, 2022: Azure Sentinel (final module) updated.

This course is ideal for professionals looking to advance their skills in cloud security, prepare for Microsoft Azure security certifications, or strengthen their organization's Azure security posture.