SC-300 Microsoft Identity and Access Administrator Exam Prep

Explore the Azure portal to manage users, groups, and applications using Microsoft Entra ID (used to be Azure Active Directory), understand tenants and subscriptions, and start creating a tenant.

Learn how Microsoft Entra ID tenant creation now requires a paid subscription, with B2C tenants available only under licensing, and how admin rights determine who can create and manage tenants.

Create a brand new Azure Active Directory tenant in the Azure portal and assign yourself global administrator rights. Choose a unique domain and region for your organization.

Switch between Azure AD tenants with ease by selecting manage tenants or switch directory, while understanding global administrator roles, tenant IDs, and license implications.

Explore Azure Active Directory roles, from global administrator to guest inviter, emphasizing the principle of least permissions and how to assign granular and custom roles.

Define custom roles in Azure AD Premium P2 and tailor group permissions. Create a group updater role that can update groups and membership but cannot create or delete groups.

Add your company domain as a custom domain to the tenant, verify ownership with a txt or mx record, and set it as primary to enable user creation.

Discover how Azure Active Directory manages devices by registering or joining Windows, Mac, Linux, iOS, and Android devices to a tenant, with policies and MFA controls.

Learn how administrative units in Azure Active Directory create logical regions to group users and groups, assign members, and restrict roles like help desk administrator to those regions.

Explore how to configure Azure AD tenant branding by adding background images, logos, color schemes, and custom texts to the sign-in and user pages, and apply branding across locations.

Create and manage users in Azure Active Directory, configure login credentials, groups, and licenses, and implement authentication and authorization with optional multifactor authentication for cloud identities.

Create and manage groups in Azure AD, distinguish security and Microsoft 365 groups, assign roles, manage owners and members, and use assigned and dynamic groups with membership queries.

Explore licensing in Azure AD Premium P2, assign licenses to users or groups, compare features with the free plan, and manage MFA options, password reset, and group access management.

Explore external identities in Azure AD, covering B2B partners and B2C end users, and learn how to invite guests and control who can invite and which domains are allowed.

Invite external users to your Azure Active Directory tenant by sending a guest user invitation, assigning them to enterprise apps, and configuring SAML authentication for secure access.

Learn how to bulk invite external users and manage them using a CSV template or PowerShell, including deletion and the New-AzureADMSInvitation cmdlet usage.

Manage external users in Azure AD with the same controls as regular members, including resetting passwords, ending sessions, bulk delete operations, and assigning groups and applications such as Adobe.

Explore configuring B2C external identities to let customers sign in via social accounts and magic links, and enable SAML or WS-Fed with providers like Google, Facebook, and LinkedIn.

Explore how to implement hybrid identity by synchronizing on-premises Active Directory with Azure Active Directory using AAD Connect, covering password hash synchronization, pass-through authentication, and single sign-on.

Set up Azure AD Connect to synchronize on-premises Active Directory with the cloud for the instructors group, enabling password hash synchronization while configuring health checks and single sign-on.

Explore Azure multifactor authentication to protect identities by requiring a second factor and configure per-user and organization-wide mfa with conditional access rules.

Explore configuring MFA settings in Azure AD, including verification options (phone, text, app, codes), app passwords, trusted IPs, lockout, and remember me on trusted devices, noting MFA server's deprecation.

Explore passwordless authentication options in Azure, including Windows Hello for Business, Microsoft Authenticator App, and a FIDO2 security key, enabling biometric and hardware-based login without passwords.

Explore password protection in Azure AD, including login lockout thresholds and durations, banned words like getcloudskills and password, and enabling protection on Windows Server Active Directory to block weak passwords.

Enable self-service password reset in Azure AD for selected or all users, with admins always enabled, while considering on-premises AD synchronization and password write-back via AD Connect.

Enable tenant restrictions to limit logins to allowed tenants by injecting headers at the router level; Microsoft Azure enforces the permit list and reports on the tenant restrictions.

Disable the preconfigured security defaults in new Azure AD tenants to practice with your own conditional access, which controls MFA for all users, admin MFA, and blocking legacy protocols.

Create and enforce Azure conditional access policies to protect risky accounts by evaluating user risk, sign-in risk, and locations, then block or require multifactor authentication for access.

Test conditional access policies using the what-if tool to verify policy behavior for different user risks, device changes, and multifactor authentication requirements.

Learn how conditional access restricts corporate app usage by user role, including blocking or logging access to apps like Dropbox. Use session controls to enforce app policies.

Explore how Azure AD Identity Protection uses user risk policy, sign-in risk policy, and MFA registration policy to detect and mitigate risk, with overview reports and simple policy configurations.

Enable single sign-on for enterprise applications by using Azure Active Directory as authentication provider, integrating cloud providers like AWS, Google Cloud, SAP, and third-party apps like Box, GitHub, and Adobe.