Microsoft Identity and Access Administrator (Live Online)

Overview

This course equips IT Identity and Access Professionals as well as IT Security Professionals with the knowledge and skills required to implement comprehensive identity management solutions based on Microsoft Azure AD and its connected identity technologies. The curriculum covers identity management for Azure AD, enterprise application registration, conditional access policies, identity governance strategies, and additional identity and access management tools.

Audience Profile:

This course is designed for Identity and Access Administrators preparing for the associated certification exam or currently performing identity and access administration responsibilities in their daily work. It is also beneficial for administrators and engineers seeking to specialize in providing identity solutions and access management systems for Azure-based environments, playing a critical role in safeguarding organizational security.

Job Role: Administrator, Security Engineer

Skills Gained:

Implement an identity management solution
Implement authentication and access management solutions
Implement access management for applications
Plan and implement an identity governance strategy

Prerequisites:

Successful learners must have prior knowledge and understanding of security best practices and industry security requirements, such as defense in depth, least privileged access, shared responsibility, and zero trust model
Familiarity with identity concepts, including authentication, authorization, and Active Directory
Some experience deploying Azure workloads. Note: this course does not cover Azure administration basics, but builds upon that knowledge by adding security-specific content
Experience with Windows and Linux operating systems and scripting languages is helpful but not required. Course labs may use PowerShell and the CLI

Course Outline:

Module 1: Implement an Identity Management Solution

Learn to create and manage your initial Azure Active Directory (Azure AD) implementation and configure the users, groups, and external identities necessary to run your solution.

Lessons

Implement initial configuration of Azure AD
Create, configure, and manage identities
Implement and manage external identities
Implement and manage hybrid identity
Lab: Manage user roles
Lab: Setting tenant-wide properties
Lab: Assign licenses to users
Lab: Restore or remove deleted users
Lab: Add groups in Azure AD
Lab: Change group license assignments
Lab: Change user license assignments
Lab: Configure external collaboration
Lab: Add guest users to the directory
Lab: Explore dynamic groups

Module 2: Implement an Authentication and Access Management Solution

Implement and administer access management using Azure AD. Utilize multi-factor authentication (MFA), conditional access policies, and identity protection to manage your identity solution effectively.

Lessons

Secure Azure AD users with MFA
Manage user authentication
Plan, implement, and administer conditional access
Manage Azure AD identity protection
Lab: Enable Azure AD MFA
Lab: Configure and deploy self-service password reset (SSPR)
Lab: Work with security defaults
Lab: Implement conditional access policies, roles, and assignments
Lab: Configure authentication session controls
Lab: Manage Azure AD smart lockout values
Lab: Enable sign-in risk policy
Lab: Configure Azure AD MFA authentication registration policy

Module 3: Implement Access Management for Applications

Explore how applications can be integrated into your identity and access solution through application registration in Azure AD.

Lessons

Plan and design the integration of enterprise applications for single sign-on (SSO)
Implement and monitor the integration of enterprise applications for SSO
Implement app registration
Lab: Implement access management for applications
Lab: Create a custom role to manage app registration
Lab: Register an application
Lab: Grant tenant-wide admin consent to an application
Lab: Add app roles to applications and receive tokens

Module 4: Plan and Implement an Identity Governance Strategy

Design and implement identity governance for your identity solution using entitlement management, access reviews, privileged access management, and monitoring of your Azure Active Directory (Azure AD).

Lessons