SC-300 : Microsoft Identity and Access Administrator | Udemy

There are no shortcuts to learning Azure Security — and this course is designed to teach it the right way. Through in-depth lab exercises and a carefully structured curriculum, you’ll build practical, real-world skills that prepare you for enterprise environments and certification success.

Whether you’re aiming to deepen your expertise in cloud security or pass a Microsoft Azure security certification, this course will guide you step by step.

Course Update Notes

• Note 1: Course update in progress – Modules 3 and 4 will be updated by October 20th.
• Note 2: All modules updated – as of October 28th, 2021.
• Note 3: New lab activities uploaded – November 29th, 2021.
• Note 4: Azure Sentinel (final module) updated – March 16th, 2022.

What You Will Learn

Initial Configuration of Azure Active Directory (Azure AD)

• Configure and manage directory roles and custom domains
• Set up device registration options
• Configure administrative units and tenant-wide settings

Identity Management

• Create, configure, and manage users and groups
• Manage licenses
• Configure external collaboration and identity providers (social, SAML, WS-Fed)

Hybrid Identity and Synchronization

• Set up and manage Azure AD Connect (AADC)
• Implement Password Hash Sync (PHS), Pass-Through Authentication (PTA), and Seamless SSO
• Integrate and manage Azure AD Connect Health
• Troubleshoot synchronization issues

Multifactor Authentication (MFA)

• Plan and implement Azure MFA (excluding legacy MFA Server)
• Manage MFA settings for users
• Configure password protection and self-service password reset

Authentication and Access Controls

• Configure FIDO2, passwordless, and Windows Hello for Business
• Set tenant restrictions and smart lockout
• Plan and implement Conditional Access policies and session controls

Identity Protection

• Configure and manage user and sign-in risk policies
• Investigate and remediate risky user activities
• Enforce MFA registration policies

Enterprise Application Integration and SSO

• Discover and manage enterprise apps
• Integrate on-premises applications using Azure AD Application Proxy
• Configure SSO for SaaS applications
• Customize tokens and manage app provisioning

Application Registration and Authorization

• Develop a line-of-business app registration strategy
• Configure application permissions and authorization

Entitlement Management and Access Reviews

• Define catalogs and access packages
• Manage lifecycle of external users
• Create and automate recurring access reviews
• Monitor review findings and license usage

Privileged Access Management

• Define strategies for managing administrative users
• Configure and manage Azure AD Privileged Identity Management (PIM)
• Assign roles, manage PIM requests, and review audit logs
• Set up and maintain break-glass accounts

Monitoring and Integration

• Analyze and troubleshoot using sign-in and audit logs
• Enable diagnostics with Log Analytics and Azure Sentinel
• Export logs to third-party SIEMs
• Use Azure AD Workbooks and alerts for analysis (excluding KQL)