Learn
Connect
Blog
Resource hub
Featured resource
2026 Tech Forecast
2026 Tech Forecast

1,500+ tech insiders, business leaders, and Pluralsight Authors share their predictions on what’s shifting fastest and how to stay ahead.

Download the forecast

SC-300: Microsoft Identity and Access Administrator

Course Summary

This SC-300 course prepares participants to design, implement, and operate identity and access management solutions using Microsoft Entra. Learn to manage secure authentication and authorization access to enterprise applications. Participants will also learn to provide seamless experiences and self-service management capabilities for all users. Finally, participants will learn to create adaptive access and governance of your identity and access management solutions ensuring you can troubleshoot, monitor, and report on your environment.

Prerequisites:

In order to succeed in thei course, you will need:

  • Familiarity with Azure and Microsoft 365 services and workloads
  • Familiarity with Active Directory Domain Services (AD DS)
  • Working knowledge of PowerShell
  • Working knowledge of Kusto Query Language (KQL)
Purpose
Learn to design, implement, and operate identity and access management solutions using Microsoft Entra while preparing for theSC-300 certification exam
Audience
Microsoft Identity and Access Administrators who are responsible for designing, implementing, and operating an organization's identity and access management using Microsoft Entra
Role
Identity and Access Administrator | Security Administrator |Cloud/Hybrid Identity Engineer |  Systems Administrator | Security Architect
Skill level
Intermediate
Style
Lecture | Hands-on Activities | Labs
Duration
4 days
Related technologies
Cloud | Microsoft Entra | PowerShell | Kusto Query Language (KQL)

 

Learning objectives
  • Configure and manage Microsoft Entra tenants, roles, administrative units, and domains
  • Create and manage user identities, groups, devices, licenses, and custom security attributes
  • Plan and implement authentication methods 
  • Design and manage Conditional Access policies, session controls, and continuous access evaluation
  • Manage identity risk using Microsoft Entra ID Protection 
  • Plan and implement workload identities, managed identities, service principals, and app registrations
  • Monitor and govern app access using Microsoft Defender for Cloud Apps
  • Monitor identity activity using logs, KQL queries, workbooks, and Identity Secure Score

What you'll learn:

In this SC-300: Microsoft Identity and Access Administrator course, you'll learn:

Implement and Manage User Identities 

  • Configure and manage a Microsoft Entra tenant
    • Configure and manage built-in and custom Microsoft Entra roles
    • Recommend when to use administrative units
    • Configure and manage administrative units
    • Evaluate effective permissions for Microsoft Entra roles
    • Configure and manage domains in Microsoft Entra ID and Microsoft 365
    • Configure Company branding settings
    • Configure tenant properties, user settings, group settings, and device settings
  • Create, configure, and manage Microsoft Entra identities
    • Create, configure, and manage users
    • Create, configure, and manage groups
    • Manage custom security attributes
    • Automate bulk operations by using the Microsoft Entra admin center and PowerShell
    • Manage device join and device registration in Microsoft Entra ID
    • Assign, modify, and report on licenses
  • Implement and manage identities for external users and tenants
    • Manage External collaboration settings in Microsoft Entra ID
    • Invite external users, individually or in bulk
    • Manage external user accounts in Microsoft Entra ID
    • Implement Cross-tenant access settings
    • Implement and manage cross-tenant synchronization
    • Configure external identity providers, including protocols such as SAML and WS-Fed
  • Implement and manage hybrid identity
    • Implement and manage Microsoft Entra Connect Sync
    • Implement and manage Microsoft Entra Cloud Sync
    • Implement and manage password hash synchronization
    • Implement and manage pass-through authentication
    • Implement and manage seamless single sign-on (SSO)
    • Migrate from AD FS to other authentication and authorization mechanisms
    • Implement and manage Microsoft Entra Connect Health

Implement Authentication and Access Management

  • Plan, implement, and manage Microsoft Entra user authentication
    • Plan for authentication
    • Implement and manage authentication methods, including certificate-based authentication, Temporary Access Pass, OAuth 2.0 tokens, Microsoft Authenticator, and passkeys (FIDO2)
    • Implement and manage tenant-wide multifactor authentication (MFA) settings
    • Configure and deploy self-service password reset (SSPR)
    • Implement and manage Windows Hello for Business
    • Disable accounts and revoke user sessions
    • Implement and manage Microsoft Entra password protection
    • Enable Microsoft Entra Kerberos authentication for hybrid identities
  • Plan, implement, and manage Microsoft Entra Conditional Access
    • Plan Conditional Access policies
    • Implement Conditional Access policy assignments
    • Implement Conditional Access policy controls
    • Test and troubleshoot Conditional Access policies
    • Implement session management
    • Implement device-enforced restrictions
    • Implement continuous access evaluation
    • Configure authentication context
    • Implement protected actions
    • Create a Conditional Access policy from a template
  • Manage risk by using Microsoft Entra ID Protection
    • Implement and manage user risk by using Microsoft Entra ID Protection or Conditional Access policies
    • Implement and manage sign-in risk by using Microsoft Entra ID Protection or Conditional Access policies
    • Implement and manage multifactor authentication registration by using authentication methods and registration campaigns
    • Monitor, investigate and remediate risky users and risky sign-ins
    • Monitor, investigate, and remediate risky workload identities
  • Implement Global Secure Access
    • Deploy Global Secure Access clients
    • Deploy and manage Private Access
    • Deploy and manage Internet Access
    • Deploy and manage Internet Access for Microsoft 365

Plan and Implement Workload Identities

  • Plan and implement identities for applications and Azure workloads
    • Select appropriate identities for applications and Azure workloads, including managed identities, service principals, user accounts, and managed service accounts
    • Create managed identities
    • Assign a managed identity to an Azure resource
    • Use a managed identity assigned to an Azure resource to access other Azure resources
  • Plan, implement, and monitor the integration of enterprise applications
    • Plan and implement settings for enterprise applications, including application-level and tenant-level settings
    • Assign appropriate Microsoft Entra roles to users to manage enterprise applications
    • Design and implement integration for on-premises apps by using Microsoft Entra Application Proxy
    • Design and implement integration for software as a service (SaaS) apps
    • Assign, classify, and manage users, groups, and app roles for enterprise applications
    • Configure and manage user and admin consent
    • Create and manage application collections
  • Plan and implement app registrations
    • Plan for app registrations
    • Create app registrations
    • Configure app authentication
    • Configure API permissions
    • Create app roles
  • Manage and monitor app access by using Microsoft Defender for Cloud Apps
    • Configure and analyze cloud discovery results by using Defender for Cloud Apps
    • Configure connected apps
    • Implement application-enforced restrictions
    • Configure Conditional Access app control
    • Create access and session policies in Defender for Cloud Apps
    • Implement and manage policies for OAuth apps
    • Manage the Cloud app catalog

Plan and Automate Identity Governance 

  • Plan and implement entitlement management in Microsoft Entra
    • Plan entitlements
    • Create and configure catalogs
    • Create and configure access packages
    • Manage access requests
    • Implement and manage terms of use (ToU)
    • Manage the lifecycle of external users
    • Configure and manage connected organizations
  • Plan, implement, and manage access reviews in Microsoft Entra
    • Plan for access reviews
    • Create and configure access reviews
    • Monitor access review activity
    • Manually respond to access review activity
  • Plan and implement privileged access
    • Plan and manage Microsoft Entra roles in Microsoft Entra Privileged Identity Management (PIM), including settings and assignments
    • Plan and manage Azure resources in PIM, including settings and assignments
    • Plan and configure PIM for Groups
    • Manage the PIM request and approval process
    • Analyze PIM audit history and reports
    • Create and manage break-glass accounts
  • Monitor identity activity by using logs, workbooks, and reports
    • Review and analyze sign-in, audit, and provisioning logs by using the Microsoft Entra admin center
    • Configure diagnostic settings, including configuring destinations such as Log Analytics workspaces, storage accounts, and Azure Event Hubs
    • Monitor Microsoft Entra ID by using KQL queries in Log Analytics
    • Analyze Microsoft Entra ID by using workbooks and reporting
    • Monitor and improve the security posture by using Identity Secure Score    

SC-300: Microsoft Identity and Access Administrator

real world content

Real-World Content

Project-focused demos and labs using your tool stack and environment, not some canned "training room" lab.
expert practitioners

Expert Practitioners

Industry experts that bring their battle scars into the classroom.
experiential learning

Experiential Learning

More coding than lecture, coupled with architectural and design discussions.
fully customized

Tailored Outlines

Once-size-fits-all doesn't apply to training teams. That's where we come in!

Dive in and learn more

When transforming your workforce, it’s important to have expert advice and tailored solutions. We can help. Tell us your unique needs and we'll explore ways to address them.

Let's chat

By clicking submit, you agree to our Privacy Policy and Terms of Use, and consent to receive marketing emails from Pluralsight.
Related Pages