Microsoft Entra ID

Explore how on-demand self-service, network access, resource pooling, rapid elasticity, and measured service enable cloud computing. See fast provisioning and elastic scaling with usage-based billing.

Explore public, private, hybrid, and multi-cloud models using Azure, AWS, and GCP, and see how private options like Azure Stack, AWS Outposts, and Google Anthos fit enterprise needs.

Explore the Azure global backbone, where data centers, regional expansion, fiber and subsea cables, edge sites, and extensive peering deliver performance, fault tolerance, and disaster recovery for users.

Explore the cloud shared responsibility model across on premises, AWS, GCP, and Azure, detailing which security and management tasks lie with you versus the provider for IaaS, PaaS, and SaaS.

Explore the Azure resource hierarchy, from management groups to subscriptions and resource groups, and learn grouping resources by the same lifecycle for governance and billing.

Explore Azure subscription types, including free and student options, pay-as-you-go, and enterprise agreements, with emphasis on the free tier for demos.

Clarify how intra ID tenants relate to Azure subscriptions and resource groups. Demonstrate that identities in the intra ID tenant access Azure resources within subscriptions and resource groups.

Explore authorization, or auth, and how it determines what a user can access after authentication, using role-based access control and attribute-based access control in Azure.

Authentication verifies your identity to grant access with passwords, biometrics, or OTP, using Windows Hello for business and the authenticator app, and relies on Kerberos and SAML protocols.

Centralize and verify user identities with the identity provider, enabling single sign-on and simplified access across thousands of apps via Microsoft Entra ID, hosting managed, user, external, and on-premises identities.

Directory services are a central database of users and device identities, delivering identity services for network resources and distinguishing on premises Active Directory from cloud identity providers.

Explore how federation enables secure, trusted cross-domain authentication and single sign-on between organizations using saml or oauth tokens, via a trust between identity and service providers.

Treat zero trust as a strategy and mindset, not a product, and verify action using identity, location, and device health, enforce least privilege, and assume breach to minimize blast radius.

Explore the Microsoft security cosmos, focusing on cloud security, SOC, and CTI with Defender XDR across identities, endpoints, apps, and cloud resources.

Defend a classical cyber kill chain with Microsoft security products, from Defender for Office phishing filters to Defender for Endpoint, Identity Plus, ID protection, Defender for Cloud Apps, and XDR.

Learn to create a free Azure subscription, choose between free and pay-as-you-go options, provide personal details, then sign in to portal.azure.com to start building in Azure.

Learn to obtain an E5 trial license, assign the E5 license to your user, and access Defender XDR features that are based on Microsoft E5.

Explore Microsoft Entra's four pillars of identity and access, from zero-trust and employee access to external identities, workload identities, and cloud permissions, via Entra ID governance, verified ID, and EPM.

Discover Microsoft Entra ID, the cloud-based identity and access management service formerly Azure Active Directory, and how it secures access to cloud resources with conditional access and B2B/B2C support.

Explore user identities in Microsoft Entra ID for Android, including synchronized, cloud, and guest identities, and learn authentication options like password, MFA, and passwordless.

Explore how to create and manage users in Microsoft Entra ID, assign roles and groups, review properties, and provision accounts with auto-generated passwords for secure identity management.

Explore how Azure managed identities enable credential-free authentication between resources, comparing system assigned identities that share a lifecycle with the resource to user assigned identities that can serve multiple resources.

Learn to leverage Azure managed identities by creating a resource group, virtual machine and SQL database, then configure system-assigned and user-assigned identities with role assignments to access resources.

Explore Microsoft Entra ID external identities to enable collaboration with guests and customers. Compare B2B collaboration, B2B direct connect, and B2C, using trusted or guest identities and cross-tenant settings.

Learn how applications gain identities in Microsoft Entra ID through app registrations, enabling authentication with secrets or certificates to access Azure resources or on premises with conditional access.

Understand why groups matter in Azure Entra ID by simplifying role assignments, enabling dynamic and self-service memberships, and distinguishing security groups from Microsoft 365 groups for scalable access control.

Create a security group in Microsoft Entra ID named demo with a description, set membership to assigned, designate owner and member, then apply Azure role assignments or administrative units.

Explore administrative units in Entra ID to restrict permissions to parts of your organization, enabling regional role delegation and membership in multiple administrative units.

Learn to manage Microsoft Entra ID by creating administrative units as logical containers, then add members, groups, devices, and roles to a Europe unit for streamlined tenant management.

Passwords are inherently insecure, with 85% of breaches leveraging them, while attackers use phishing, keylogging, and offline cracking of unsalted hashes. Move to multi-factor authentication or passwordless to strengthen security.

Discover password protection in Microsoft Entra ID, using real-time validation to block weak or compromised passwords via global and custom ban lists, across cloud and on-premises with hybrid identity.

Explore password protection in Microsoft Entra ID, configure cloud and on-prem password policies, set logout thresholds, and enforce or audit custom banned passwords with case-insensitive checks.

Enable self-service password reset with Microsoft Entra ID using the authenticator app to reduce help desk calls, speed recovery, and securely synchronize cloud and on-premises passwords.

Enable self-service password reset for your organization, apply it to all users or a chosen group, and configure a converged policy using mobile app, email, or security questions.

Explore Android authentication methods, from passwords and SMS to passwordless options like Windows Hello for business, OAuth tokens, FIDO2 keys, and certificate-based authentication, and examine MFA and password reset implications.

Learn how Microsoft Entra ID enables multi-factor authentication by combining something you know and something you have, highlighting passwordless methods Windows Hello, Fido key, and Microsoft Authenticator for phishing resistance.

Explore configuring authentication methods in Entra ID, enable passkeys (FIDO2) and SMS, scope users or groups, and enforce per-user MFA settings.

Learn how passwordless authentication with Windows Hello for business uses a device-bound nonce, private key, and TPM protection to provide seamless single sign-on.

Explore passwordless authentication options in Microsoft Entra ID, focusing on Microsoft Authenticator configuration and number matching. Enable phishing- and MFA fatigue-resistant push notifications with selective group targets and location awareness.

Explore how single sign on in the Microsoft ecosystem authenticates once, letting internal and external users access apps like Dropbox and Salesforce via Active Directory synchronized to the cloud.