SC-300 Microsoft Identity and Access Administrator (SC-300T00)

Seminarinformationen

Seminar - Ziel

The Microsoft Identity and Access Administrator course explores how to design, implement, and operate an organization’s identity and access management systems by using Azure AD. Learn to manage tasks such as providing secure authentication and authorization access to enterprise applications. You will also learn to provide seamless experiences and self-service management capabilities for all users. Finally, learn to create adaptive access and governance of your identity and access management solutions ensuring you can troubleshoot, monitor, and report on your environment. The Identity and Access Administrator may be a single individual or a member of a larger team. Learn how this role collaborates with many other roles in the organization to drive strategic identity projects. The end goal is to provide you knowledge to modernize identity solutions, to implement hybrid identity solutions, and to implement identity governance.

Teilnehmer - Zielgruppe

This course is for the Identity and Access Administrators who are planning to take the associated certification exam, or who are performing identity and access administration tasks in their day-to-day job. This course would also be helpful to an administrator or engineer that wants to specialize in providing identity solutions and access management systems for Azure-based solutions; playing an integral role in protecting an organization.

Kurs - Voraussetzungen

Security best practices and industry security requirements such as defense in depth, least privileged access, shared responsibility, and zero trust model.
Be familiar with identity concepts such as authentication, authorization, and active directory.
Have some experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on that knowledge by adding security specific information.
Some experience with Windows and Linux operating systems and scripting languages is helpful but not required. Course labs may use PowerShell and the CLI.

Seminardauer

4 Tage
09:00 Uhr bis 17:00 Uhr

Schulungsunterlagen

nach Absprache

Seminar-Inhalt / Agenda

Explore identity and Azure AD

Define common identity terms and explain how they are used in the Microsoft Cloud
Explore the common management tools and needs of an identity solution
Review the goal of Zero Trust and how it is applied in the Microsoft Cloud
Explore the available identity services in the Microsoft Cloud

Implement initial configuration of Azure Active Directory

Implement initial configuration of Azure Active Directory
Create, configure, and manage identities
Implement and manage external identities (excluding B2C scenarios)
Implement and manage hybrid identity

Create, configure, and manage identities

Create, configure, and manage users
Create, configure, and manage groups
Manage licenses
Explain custom security attributes and automatic user provisioning

Implement and manage external identities

Manage external collaboration settings in Azure Active Directory
Invite external users (individually or in bulk)
Manage external user accounts in Azure Active Directory
Configure identity providers (social and SAML/WS-fed)

Implement and manage hybrid identity

Plan, design, and implement Azure Active Directory Connect (AADC)
Manage Azure Active Directory Connect (AADC)
Manage password hash synchronization (PHS)
Manage pass-through authentication (PTA)
Manage Seamless Single Sign-On (Seamless SSO)
Manage federation excluding manual ADFS deployments
Troubleshoot synchronization errors
Implement and manage Azure Active Directory Connect Health

Secure Azure Active Directory users with Multi-Factor Authentication

Learn about Azure AD Multi-Factor Authentication (Azure AD MFA)
Create a plan to deploy Azure AD MFA
Turn on Azure AD MFA for users and specific apps

Manage user authentication

Administer authentication methods (FIDO2 / Passwordless)
Implement an authentication solution based on Windows Hello for Business
Configure and deploy self-service password reset
Deploy and manage password protection
Implement and manage tenant restrictions

Plan, implement, and administer Conditional Access

Plan and implement security defaults.
Plan conditional access policies.
Implement conditional access policy controls and assignments (targeting, applications, and conditions).
Test and troubleshoot conditional access policies.
Implement application controls.
Implement session management.
Configure smart lockout thresholds.

Manage Azure AD Identity Protection

Implement and manage a user risk policy
Implement and manage sign-in risk policies
Implement and manage MFA registration policy
Monitor, investigate, and remediate elevated risky users

Implement access management for Azure resources

Configure and use Azure roles within Azure AD
Configure and managed identity and assign it to Azure resources
Analyze the role permissions granted to or inherited by a user
Configure access to data in Azure Key Vault using RBAC-policy

Plan and design the integration of enterprise apps for SSO

Discover apps by using MCAS or ADFS app report.
Design and implement access management for apps.
Design and implement app management roles.
Configure pre-integrated (gallery) SaaS apps.

Implement and monitor the integration of enterprise apps for SSO

Implement token customizations
Implement and configure consent settings
Integrate on-premises apps by using Azure AD application proxy
Integrate custom SaaS apps for SSO
Implement application user provisioning
Monitor and audit access/Sign-On to Azure Active Directory integrated enterprise applications

Implement app registration

Plan your line of business application registration strategy
Implement application registrations
Configure application permissions
Plan and configure multi-tier application permissions

Plan and implement entitlement management

Define catalogs.
Define access packages.
Plan, implement and manage entitlements.
Implement and manage terms of use.
Manage the lifecycle of external users in Azure AD Identity Governance settings.

Plan, implement, and manage access review

Plan for access reviews
Create access reviews for groups and apps
Monitor the access review findings
Manage licenses for access reviews
Automate management tasks for access review
Configure recurring access reviews

Plan and implement privileged access

Define a privileged access strategy for administrative users (resources, roles, approvals, and thresholds)
Configure Privileged Identity Management for Azure AD roles
Configure Privileged Identity Management for Azure resources
Assign roles
Manage PIM requests
Analyze PIM audit history and reports
Create and manage emergency access accounts

Monitor and maintain Azure Active Directory

Analyze and investigate sign in logs to troubleshoot access issues
Review and monitor Azure AD audit logs
Enable and integrate Azure AD diagnostic logs with Log Analytics / Azure Sentinel
Export sign in and audit logs to a third-party SIEM (security information and event management)
Review Azure AD activity by using Log Analytics / Azure Sentinel, excluding KQL (Kusto Query Language) use
Analyze Azure Active Directory workbooks / reporting
Configure notifications

Tags: Microsoft, Offizieller Microsoft Kurs

Weitere Schulungen zu Thema Microsoft Security

SC-900 Microsoft Security, Compliance, and Identity Fundamentals (SC-900T00)

- u.a. in Nürnberg, Berlin, Stuttgart, München, Köln

Learn the business value and product capabilities of Microsoft Power Platform. Create simple Power Apps, connect data with Dataverse, build a Power BI Dashboard, and automate processes with Power Automate.

SC-400 Microsoft Information Protection Administrator (SC-400T00)

- u.a. in Nürnberg, Berlin, Stuttgart, München, Köln

Learn how to protect information in your Microsoft 365 deployment. This course focuses on data governance and information protection within your organization. The course covers implementation of data loss prevention policies, sensitive information types, sensitivity labels, ...

SC-200 Microsoft Security Operations Analyst (SC-200T00)

- u.a. in Hannover, Köln, Leipzig, München, Darmstadt

Learn how to investigate, respond to, and hunt for threats using Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft 365 Defender. In this course you will learn how to mitigate cyberthreats using these technologies. Specifically, you will configure and use Microsoft ...

SC-100 Microsoft Cybersecurity Architect (SC-100T00)

- u.a. in Hannover, Köln, Zürich, Darmstadt, Freiburg

This course prepares students with the background to design and evaluate cybersecurity strategies in the following areas: Zero Trust, Governance Risk Compliance (GRC), security operations (SecOps), and data and applications. Students will also learn how to design and architect ...