Microsoft SC-300 Exam Course: Identity and Access Admin

Prepare for the SC-300: Microsoft Identity and Access Administrator exam by mastering identity governance, authentication, access management, and hybrid identity solutions. This course covers Azure AD, conditional access, privileged identity management (PIM), and enterprise app integrations to secure identity solutions.

4.9

★★★★★

(525)

8,000 Students

14.5 Hours

Stage 3 - Intermediate

Last update: Dec 2023

Audio Language: English

Subtitles/Captions: Yes

Caption Language: English

Focus: Azure Courses, Cloud Security Training, Cloud Certification Courses, Certification Courses, Cyber Security Certification Courses, Cloud Computing Courses, Cyber Security Courses

Type of Training: Online self-paced

What You’ll Learn

This Microsoft SC-300 Exam Course: Identity and Access Admin course will teach you:

Implement Identity Management:
Configure Azure AD, custom domains, and administrative units.
Hybrid Identity Solutions:
Deploy Azure AD Connect, Password Hash Sync (PHS), Pass-Through Authentication (PTA), and SSO.
Conditional Access & MFA:
Implement Multi-Factor Authentication (MFA), risk policies, and access reviews.
Identity Governance:
Manage privileged identity management (PIM), entitlements, and role assignments.
Application Security:
Integrate SSO for SaaS apps, Azure AD Proxy, token-based authentication, and custom app permissions.

External Identities:
Configure B2B and B2C collaboration, identity federation, and access policies.
Authentication & Authorization:
Implement passwordless authentication, FIDO2 keys, and identity protection.
Enterprise Application Management:
Configure app registrations, consent settings, and Microsoft Cloud App Security (MCAS).
Security Monitoring:
Analyze sign-in logs, audit reports, Sentinel integration, and security alerts.
SC-300 Exam Preparation:
Learn best practices, troubleshooting techniques, and case study-based security solutions.

Included in the Microsoft SC-300 Exam Course

14.5 Hours of On-Demand Video

2 Downloadable Resources

1 Article

Access on Mobile

Certificate of Completion

Suitable for the Following Careers

Identity & Access Administrator

Security Engineer

Azure AD Engineer

IAM Specialist

Cybersecurity Analyst

IT Administrator

Course Content

Introduction

SC 300 Course Introduction

Module 1: Implement and Identity Management Solution (25-30%)

Module 1 - Introduction

Active Directory - Throw Back

What is Azure Active Directory

Who uses Azure AD

Azure AD Roles

Differences between Azure Roles and Azure AD Roles

Capabilities of Global Admin

Azure AD Roles - Lab Activity

Azure AD - Custom roles

Custom Domains

Deleting Custom Domains

Bring Your Devices

Azure AD registered Devices

Azure AD Join

Azure AD domain Join - Lab

Azure AD - Hybrid Joined

Azure AD - Administrative Units

Administrative Units - Lab Activity

Planning and Delegation - Administrative Units

Plan for Delegation

Security Defaults

Create Configure and Manage Identities - Introduction

Azure Active Directory - Users

Azure Active Directory - Groups

Managing Licenses

License Requirements

Licensing Features

Implement and Manage External Identities - Introduction

Azure AD B2B Collaboration

Azure AD B2B - Lab Activity

Dynamic Groups

Dynamic Groups - Lab

Azure AD B2B - Google Auth - Demo

Implement and Manage Hybrid Identity

Plan, Design, and Implement Azure AD Connect

Need for AD connect

Selecting the Right Authentication Method

Azure AD External Collaboration Settings

Azure AD Password Hash Synchronization (PHS)

Azure AD password Through Authentication (PTA)

Federated authentication

Architecture diagrams

Azure AD Design Considerations

Azure AD Connect Components

PHS - How does it work?

Azure AD connect - Lab

Troubleshooting Sync Errors

Data mismatch errors - InvalidSoftMatch

Data mismatch errors - ObjectTypeMismatch

Duplicate attributes - AttributeValueMustBeUnique

Data validation failures - IdentityDataValidationFailed

FederatedDomainChangeError

LargeObjects error

Azure AD Connect Health Installation

Azure AD Connect Health

Self Remediation and Orphaned Objects

Lab 1 - Assigning Roles to User Accounts

Lab 2 - Tenant Properties

Lab 3 - Assigning Licenses to groups

Lab 4 - External Collaboration Settings

Lab 5 - Restoring Deleted Users

Module 1 - Summary

Module 2 - Implement an Authentication and Access Management Solution (25-30%)

Module 2 - Introduction

Plan and Implement Azure Multifactor Authentication- Introduction

What is Azure AD MFA

How Multi-Factor Authentication works

Planning the MFA

Enforcing MFA with Conditional Access

Deciding supported authentication methods

Azure AD Authentication methods

Monitoring and Usage

Manage User Authentication- Lesson Introduction

Password Less Authentication - Introduction

Security Usability Availability of Authentication Methods

Configuring Fido Key for a User - Lab

Windows Hello for Business

Windows Hello for Business works-key points

Azure AD Password Protection

Azure AD Password Protection - Lab

Multiple Forests and RODC - Considerations

Plan Implement and Manage Conditional Access

What Policies are Enforced and to Whom?

Blocking legacy authentication

Conditional Access Policies - Planning

Conditional Access Policies - Benefits

Conditional Access policies - Components

Conditional Access Policies - Best Practices

Condition Access Policies - Most Common Policies

Conditional Access Policies - Build and Test Policies - I

Conditional Access Policies - Build and Test Policies - II

Conditional Access Policy - Blocking Locations - Lab

Troubleshooting using Sign-in Logs

Device Compliance

Conditional Access Policy - Device Compliance - Lab

User Exclusions

Conditional Access Policy - O365 Block MFA Required - Lab

Test and Troubleshoot Conditional Access Policies

Implement Application Controls and Application

Scenario 1 - Microsoft 365 apps require an approved client

Scenario 2 - Exchange Online and SharePoint Online

App Protection Policies Overview

How Can you Protect App Data

Manage Azure AD Identity Protection - Introduction

Manage Azure AD Identity Protection

Risk Detection and Remediation

Permissions

License Requirements

Choosing Acceptable Risk Levels

Prerequisites of Self Remediation

Navigating through the reports - Lab

Remediate Risks and Unblock Users

User Risk Remediation Options

Unblocking Users

Enable Azure AD MFA - EnterpriseWide LAB

Deploy SSPR - Setup

Security Defaults - Lab

Control User Sign in frequency - LAB

Smart Lockout Values

Configuring User and Sign in Risk Policy

Configure Azure AD MFA Registration Policy

Module 2 Summary

Module 3 - Plan and Design Integration of Enterprise Apps for SSO (25-30%)

Module 3 - Introduction

Microsoft Cloud App Security - CASB Solution from Microsoft

MCAS Architecture

Need to Migrate from ADFS

Discover AD FS applications - Lab

Design and Implement App Management Roles

Restrict Who Can Create Applications

Configure Saas Based Applications

Implement and Monitor SSO apps - Introduction

Token Customizations

What is a Consent

User Consent Settings

What is Azure Application Proxy

How Azure App Proxy Works

Comparison of Various Protocols Used by IDPs

Implement Application User Provisioning

Manual Vs Automatic User Provisioning

SCIM - System for Common Identity Management

SCIM Demonstration

SCIM - Attribute Exchange

Usage , Insights and Audit Reports for Enterprise Applications

Application Registrations

The Need to Integrate Applications with Azure AD

What are Application Objects

What are Service Principals

Relation Between Application Objects and Services Principals

Roles and permissions required

Tenants - Who can sign in to your new app

Azure Application Registrations - part 1

Types of Permissions - Delegated and Application

Requesting Individual User Consent

Manifest File, Token and Claims

Integrate Applications with Azure AD - Lab

Troubleshooting SAML

Module 3 Summary

Module 4 - Plan and Implement Identity Governance Strategy (10-15 %)

Module 4 - Introduction

Planning and Implementing Entitlement Management - Chapter Introduction

What is Entitlement Management

Capabilities of Entitlement Management

Entitlement Management - Terminology

What Resources Can I Manage With Access Packages

How Do I Control Who Gets Access

When Should I Use Access Packages

Plan, Implement, and Manage Access Reviews - Introduction

Plan For Access Reviews

What is Azure AD Identity Governance

Access Reviews - Lab

Planning the Ccope

Components of an access review

Planning Communications

Access Reviews Lab Activity - I

Access Reviews Lab Activity - II

Managing Licenses for Access Reviews

Plan and Implement Privileged Access

Azure Active Directory Privileged Identity Management

PIM - Stakeholders

Principle of Least priviledge - Best practices for PIM

Decide the Roles That Should Be Protected by PIM

Decide What to Protect with PIM

Assign Azure AD roles in Privileged Identity Management - Lab

Configuring PIM for Azure AD Roles

Discovering Resource to Mange

Audit History - Lab

Create and Manage Emergency Access Accounts - I

Create and Manage Emergency Access Accounts - II

Exclusions

Validating Emergency Accounts

Monitor and Maintain Azure AD - Introduction

Analyze Sign-in and Troubleshoot Access Issues - Components

Access and Licenses

Audit Log - Users and Groups

Exporting Logs to Third Party Security Solutions

Integration Recommendations

Analyze Azure AD Workbooks and Reporting

Module 4 - Summary

Azure Sentinel - Chapter 1

What is a SIEM Solution

What is Microsoft Sentinel

Microsoft Sentinel - Components

Data Connectors

Log Retention

Workbooks

Analytics Alerts

Threat Hunting

Incidents Investigations

Automation Playbooks

Creating Azure Sentinel Workspace

Azure Sentinel - RBAC

Data Connectors

On boarding Windows host to Sentinel

Ingesting Events to Sentinel

Sentinel - Watchlists

Sentinel - Creating a watchlist for Tor Nodes

Sentinel - Create Hunting Query

Sentinel - Live Stream

21 Sentinel - Capturing traffic from TOR Exit Nodes

Sentinel - Create Analytical Rules

Analytical Rule Type - Fusion

Analytical Rule Types - Security Types

Analytical Rule Types - ML based Behavioral Analytics

Analytical Ryle Types - Anomaly, Scheduled Alerts and NRT

Creating Anayltics Rules based on Template

Creating Analytic Rules based on Wizard

Managing the Rules

Define Threat Intelligence

Create TI - Lab Activity

Azure Sentinel - Chapter 2

Azure Sentinel - Chapter 3

Chapter Introduction

Key Concepts of Incident Management - I

Key Concepts of Incident Management - II

Incident Mangement in Microsoft Sentinel - I

Incident Mangement in Microsoft Sentinel - II

Brute Force attack against Azure Portal - Simulation

Investigations in Azure Sentinel

Threat Response with Microsoft Sentinel Playbooks - Introduction

Step 1 - Creating Analytical Rule to look for Role membership Changes

Step 2 - Integrate Log Analytics with Azure AD Audit Logs

Step 3 - Verify Log Analytics

Incident Creation in Sentinel

Create a Logic app to integrate with Microsoft teams

Edit Analytical rule to add Logic app Playbook

Testing the integration

UEBA - Introduction

Entity Behavior Lab - I

Entity Behavior Lab - II

Workbooks - Introduction

Create Workbooks Using Template

Create Workbook from scratch

OPEN FULL CURRICULUM

Requirements

Basic knowledge of Azure and Active Directory

Experience with authentication and access management solutions

Understanding of security principles and identity governance

Enthusiasm for learning and securing enterprise identity solutions

Description of Microsoft SC-300 Exam Training

The SC-300: Microsoft Identity and Access Administrator exam validates expertise in identity and access management, security policies, and governance strategies using Microsoft Entra ID (formerly Azure AD). This course covers the design, implementation, and monitoring of identity solutions for hybrid and cloud environments.

Gain hands-on experience with Azure Active Directory, authentication solutions, privileged access management (PIM), and application security. Whether you’re an identity security professional or preparing for the SC-300 certification, this course equips you with the skills needed to protect enterprise identities, secure applications, and manage access permissions.

Deploy Azure AD & Hybrid Identity Solutions (PHS, PTA, SSO, ADFS).
Implement MFA, conditional access, and identity protection policies.
Configure B2B & B2C identities, app registrations, and token-based authentication.
Monitor identity security risks using sign-in logs, audit reports, and Microsoft Sentinel.
Manage entitlement governance, role assignments, and security delegation.
Prepare for the SC-300 certification exam with expert-led training and hands-on labs.

Secure enterprise identities, prevent unauthorized access, and enhance identity governance with SC-300 certification training.

Who Is This Course For

Ideal for identity administrators, security professionals, and IT administrators looking to earn the SC-300 certification and specialize in Microsoft identity solutions.

Course Instructor

StationX

StationX has been an award-winning, leading provider of online cybersecurity training and consultancy services since 1999. Through hands-on learning experiences, StationX offers the most engaging and effective way to learn real-world concepts and skills essential for a successful cyber career.

StationX has built and aggregated over 1,000 classes, virtual labs, practice tests, and exam simulations covering cybersecurity, hacking, penetration testing, certifications, Linux, networking, and cloud computing. Their training has benefited more than 250,000 students in 195+ countries, earning them the prestigious AI Cyber Security Educator of the Year 2020 Award.

Read More

Read Less

Testimonials

★★★★★

Jang B.

I found the course to be well-paced and engaging, with a good balance of theory and practical application. The instructor was knowledgeable and approachable.

★★★★★

CH S.

The course content is well-organized and presented in a clear and engaging manner. I especially appreciated the inclusion of real-world examples and case studies.

★★★★★

Irfan P.

I've been working in IT for a few years now, and this course really helped me to fill in some gaps in my knowledge about Microsoft Identity & Access. I especially appreciated the focus on real-world scenarios.

Show More

Show Less

Frequently Asked Questions

How many questions are in SC-300 exam?

The SC-300 exam contains between 40 and 60 multiple-choice and multi-response questions.

What is SC-300 about?

The Microsoft SC-300 exam covers identity and access management, as well as other cloud security and compliance topics as they relate to Azure infrastructure and Microsoft 365.

When does the course start and finish?

Microsoft SC-300 exam course starts now and never ends! It is a completely self-paced online course - you decide when you start and when you finish.

Students Who Took This Course Also Liked

Guarantee Your Cyber Security Career with the StationX Master’s Program!

Get real work experience and a job guarantee in the StationX Master’s Program. Dive into tailored training, mentorship, and community support that accelerates your career.

Job Guarantee & Real Work Experience: Launch your cybersecurity career with guaranteed placement and hands-on experience within our Master’s Program.
30,000+ Courses and Labs: Hands-on, comprehensive training covering all the skills you need to excel in any role in the field.
Pass Certification Exams: Resources and exam simulations that help you succeed with confidence.
Mentorship and Career Coaching: Personalized advice, resume help, and interview coaching to boost your career.
Community Access: Engage with a thriving community of peers and professionals for ongoing support.
Advanced Training for Real-World Skills: Courses and simulations designed for real job scenarios.
Exclusive Events and Networking: Join events and exclusive networking opportunities to expand your connections.

TAKE THE NEXT STEP IN YOUR CAREER TODAY!

UNLOCK YOUR MASTER’S PROGRAM

UNLOCK THE STATIONX MASTER’S PROGRAM

Your Path to a Guaranteed Cybersecurity Job & Real Experience

In the StationX Master’s Program, you’ll gain:

30,000+ Cybersecurity Courses & Labs
Pass Top Cybersecurity Certification Exams
Cybersecurity Mentorship & Career Support
Dedicated Cybersecurity Community
Advanced Real-World Cybersecurity Training
Exclusive Cybersecurity Networking

UNLOCK YOUR CAREER

Microsoft SC-300 Exam Course: Identity and Access Admin

What You’ll Learn

Included in the Microsoft SC-300 Exam Course

Suitable for the Following Careers

Course Content

Introduction

Module 1: Implement and Identity Management Solution (25-30%)

Module 2 - Implement an Authentication and Access Management Solution (25-30%)

Module 3 - Plan and Design Integration of Enterprise Apps for SSO (25-30%)

Module 4 - Plan and Implement Identity Governance Strategy (10-15 %)

Azure Sentinel - Chapter 1

Azure Sentinel - Chapter 2

Azure Sentinel - Chapter 3

OPEN FULL CURRICULUM

Requirements

Description of Microsoft SC-300 Exam Training

Who Is This Course For

Course Instructor

Testimonials

Frequently Asked Questions

Students Who Took This Course Also Liked

IAM Azure Identity and Access Management Full Course

Microsoft SC-900 Exam: Azure Security Course

Guarantee Your Cyber Security Career with the StationX Master’s Program!

Your Path to a Guaranteed Cybersecurity Job & Real Experience

StationX Accelerator Pro

StationX Accelerator Premium

StationX Master's Program