Microsoft Certified: Identity and Access Administrator Associate (SC-300) Study Guide
The Microsoft Certified: Identity and Access Administrator Associate certification enables you to learn more about the Microsoft Identity Platform and how to use Azure services to manage identity and access in your Azure and Microsoft environments. This is an associate level certification, so I would recommend you to set aside some time to study for the exam and practice using some of the services related to this exam and the labs referenced in the additional resources - ‘Practice makes perfect’
Audience Profile
This exam is for everyone looking forward to learn more about Microsoft Identity Platform and learn how to design, implement and operate a company’s identity and manage access by using Azure Active Directory. This involves performing several tasks, including configure and provide secure authentication and authorization access to users and applications, provide self-service management capabilities for the users and manage all tasks related to identity and access in those environments.
This exam may be useful to you or your team reponsible for Identity and Access management in your company.
In this study guide, I will share with you some of the useful resources you can use to guide you during your learning path to get this certification.
View my verified achievement from Microsoft!
NOTE: This study guide is aligned with the exam skills outline, but since the skills outline may be updated in the future, I would recommend you to have a look at the skills outline to understand if there are any changes identified. Please visit this link and download the exam skills outline
Certification Path
| Exam Name | Link |
|---|---|
| Exam SC-300: Microsoft Identity and Access Administrator | Exam Details |
Exam SC-300: Microsoft Identity and Access Administrator
The SC-300 has a length of 120 minutes and there are 40-60 questions and you need a minimum of 700 of 1000 points to pass the exam.
First place to go is the Microsoft Learn platform where a dedicated learning path is available, for free.
Note: I would recommend you to finalize all modules in the collection above, since you have relevant information there that will help you prepare for the exam.
Skills measured
Implement an Identity Management Solution (25-30%)
Implement initial configuration of Azure Active Directory
- configure and manage Azure AD directory roles
- configure and manage custom domains
- configure and manage device registration options
- configure delegation by using administrative units
- configure tenant-wide settings
Create, configure and manage identities
- create, configure and manage users
- create, configure and manage groups
- manage licenses
Implement and manage external identities
- manage external collaboration settings in Azure Active Directory
- invite external users (individually or in bulk)
- manage external user accounts in Azure Active Directory
- configure identity providers (social and SAML/WS-fed)
Implement and manage hybrid identity
- implement and manage Azure Active Directory Connect (AADC)
- implement and manage Azure AD Connect cloud sync
- implement and manage Password Hash Synchronization (PHS)
- implement and manage Pass-Through Authentication (PTA)
- implement and manage seamless Single Sign-On (SSO)
- implement and manage Federation (excluding manual ADFS deployments)
- implement and manage Azure Active Directory Connect Health
- troubleshoot synchronization errors
Implement an Authentication and Access Management Solution (25-30%)
Plan and implement Azure Multifactor Authentication (MFA)
- plan Azure MFA deployment (excluding MFA Server)
- implement and manage Azure MFA settings
- manage MFA settings for users
Manage user authentication
- administer authentication methods (FIDO2 / Passwordless)
- implement an authentication solution based on Windows Hello for Business
- configure and deploy self-service password reset
- deploy and manage password protection
- Configure smart lockout thresholds
- implement and manage tenant restrictions
Plan, implement and administer conditional access
- plan and implement security defaults
- plan conditional access policies
- implement conditional access policy controls and assignments (targeting, applications, and conditions)
- testing and troubleshooting conditional access policies
- implement application controls
- implement session management
Manage Azure AD Identity Protection
- implement and manage a user risk policy
- implement and manage sign-in risk policy
- implement and manage MFA registration policy
- monitor, investigate and remediate elevated risky users
Implement Access Management for Apps (10-15%)
Plan, implement, and monitor the integration of Enterprise Apps for SSO
- implement and configure consent settings
- discover apps by using MCAS or ADFS app report
- design and implement access management for apps
- design and implement app management roles
- monitor and audit access / Sign-iOns to Azure Active Directory integrated enterprise applications
- integrate on-premises apps by using Azure AD application proxy
- integrate custom SaaS apps for SSO
- configure pre-integrated (gallery) SaaS apps
- implement application user provisioning
Implement app registrations
- plan your line of business application registration strategy
- implement application registrations
- configure application permissions
- implement application authorization
- plan and configure multi-tier application permissions
Plan and Implement an Identity Governance Strategy (25-30%)
Plan and implement entitlement management
- define catalogs
- define access packages
- plan, implement and manage entitlements
- implement and manage terms of use
- manage the lifecycle of external users in Azure AD Identity Governance settings
Plan, implement and manage access reviews
- plan for access reviews
- create access reviews for groups and apps
- monitor access review findings
- manage licenses for access reviews
- automate access review management tasks
- configure recurring access reviews
Plan and implement privileged access
- define a privileged access strategy for administrative users (resources, roles, approvals, thresholds)
- configure Privileged Identity Management for Azure AD roles
- configure Privileged Identity Management for Azure resources
- assign roles
- manage PIM requests
- analyze PIM audit history and reports
- create and manage break-glass accounts
Monitor and maintain Azure Active Directory
- analyze and investigate sign-in logs to troubleshoot access issues
- review and monitor Azure AD audit logs
- enable and integrate Azure AD diagnostic logs with Log Analytics / Azure Sentinel
- export sign-in and audit logs to a third-party SIEM
- review Azure AD activity by using Log Analytics / Azure Sentinel, excluding KQL use
- analyze Azure Active Directory workbooks / reporting
- configure notifications
Additional resources
Below follows the list of additional resources that you should consider and a quick note to the Microsoft Learn collection shared there. I tried to extend the learning paths you have available on the exam’s page with some extra modules that I consider relevant to the exam.
Best of Luck and share your results with the community once you get certified! 😊💪