SC-300 : Microsoft Identity and Access Administrator (Udemy.com)

There are no shortcuts to learning Azure Security — and this course is designed to teach it the right way. Through in-depth lab exercises and a carefully structured curriculum, you'll build practical, real-world skills that prepare you for enterprise environments and certification success.

Whether you're aiming to deepen your expertise in cloud security or pass a Microsoft Azure security certification, this course will guide you step by step.

Course Update Notes

• Note 1: Course update in progress – Modules 3 and 4 will be updated by October 20th.

• Note 2: All modules updated – as of October 28th, 2021.

• Note 3: New lab activities uploaded – November 29th, 2021.

• Note 4: Azure Sentinel (final module) updated – March 16th, 2022.

What You Will Learn

Initial Configuration of Azure Active Directory (Azure AD)

• Configure and manage directory roles and custom domains

• Set up device registration options

• Configure administrative units and tenant-wide settings

Identity Management

• Create, configure, and manage users and groups

• Manage licenses

• Configure external collaboration and identity providers (social, SAML, WS-Fed)

Hybrid Identity and Synchronization

• Set up and manage Azure AD Connect (AADC)

• Implement Password Hash Sync (PHS), Pass-Through Authentication (PTA), and Seamless SSO

• Integrate and manage Azure AD Connect Health

• Troubleshoot synchronization issues

Multifactor Authentication (MFA)

• Plan and implement Azure MFA (excluding legacy MFA Server)

• Manage MFA settings for users

• Configure password protection and self-service password reset

Authentication and Access Controls

• Configure FIDO2, passwordless, and Windows Hello for Business

• Set tenant restrictions and smart lockout

• Plan and implement Conditional Access policies and session controls

Identity Protection

• Configure and manage user and sign-in risk policies

• Investigate and remediate risky user activities

• Enforce MFA registration policies

Enterprise Application Integration and SSO

• Discover and manage enterprise apps

• Integrate on-premises applications using Azure AD Application Proxy

• Configure SSO for SaaS applications

• Customize tokens and manage app provisioning

Application Registration and Authorization

• Develop a line-of-business app registration strategy

• Configure application permissions and authorization

Entitlement Management and Access Reviews

• Define catalogs and access packages

• Manage lifecycle of external users

• Create and automate recurring access reviews

• Monitor review findings and license usage

Privileged Access Management

• Define strategies for managing administrative users

• Configure and manage Azure AD Privileged Identity Management (PIM)

• Assign roles, manage PIM requests, and review audit logs

• Set up and maintain break-glass accounts

Monitoring and Integration

• Analyze and troubleshoot using sign-in and audit logs

• Enable diagnostics with Log Analytics and Azure Sentinel

• Export logs to third-party SIEMs

• Use Azure AD Workbooks and alerts for analysis (excluding KQL)