Overview

Welcome to Microsoft Entra Core Capabilities is the second course in the SC-900: Microsoft Security, Compliance, and Identity Fundamentals specialization. This course is designed for IT administrators, security engineers, and cloud learners who want to strengthen their understanding of identity-first security and governance using Microsoft Entra. You’ll explore Microsoft Entra ID’s product family, including core identity management, authentication methods like MFA and passwordless, Conditional Access policies, and RBAC. The course also covers governance capabilities such as Privileged Identity Management (PIM), lifecycle automation, and identity protection for securing hybrid and external identities. By the end of this course, you’ll have the skills to confidently design, configure, and govern secure access in Microsoft environments. This course includes 6-7 hours of expert-led video instruction, organized into three focused modules. Each module includes guided lessons, demos, and interactive quizzes to reinforce your understanding. Recommended Background Basic familiarity with Microsoft Entra ID (Azure AD) and Microsoft 365 identity services Understanding of authentication concepts (MFA, SSO, passwordless) and RBAC principles Prior exposure to IT administration or security operations is helpful but not required Who Should Take This Course? IT Administrators & Identity Engineers looking to strengthen IAM skills Cloud Security & Governance Professionals building identity-first security strategies Microsoft 365 & Azure Administrators managing user access and permissions Students or professionals preparing for the SC-900 certification or SC-300: Microsoft Identity & Access Administrator Associate By the end of this course, you will be able to get knowledge on Microsoft’s SCI approach and Zero Trust fundamentals. Describe capabilities across Entra, Defender, Sentinel, and Purview and when to use each. Apply shared responsibility, basic encryption, and governance concepts in common scenarios. Be prepared to take and pass the SC-900 certification exam.

Syllabus

Microsoft Entra Essesentials

This week covers Entra ID’s authentication methods and access control capabilities. You’ll configure Multi-Factor Authentication (MFA), implement password policies, and set up Conditional Access policies to enforce least-privilege access. The week also explores RBAC learning to assign roles at the right scope and manage device joins. By the end of week you will be able to Explain Microsoft Entra ID’s role within Microsoft’s security ecosystem, Configure and manage Microsoft Entra ID tenants, Enable external user collaboration securely, and Differentiate between identity providers and configure federated authentication.

Microsoft Entra ID Capabilities

Welcome to Week 2! this week, we dive into authentication and access management in Microsoft Entra ID. You’ll configure Multi-Factor Authentication (MFA), password protection policies, and Conditional Access rules to enforce secure sign-ins. The lessons also cover RBAC (Role-Based Access Control), demonstrating how to assign roles and manage permissions effectively across different scopes. By the end of the week, you will be able to Configure MFA and passwordless authentication methods, Design Conditional Access policies for secure access and Implement RBAC effectively at tenant, group, or resource scope.

Microsoft Entra ID: Protection & Governance

Welcome to Week 3! this week focuses on governance and identity protection features of Microsoft Entra ID. You’ll explore Privileged Identity Management (PIM) to enforce just-in-time (JIT) access, conduct access reviews, and automate provisioning/deprovisioning. This week also covers Microsoft Entra ID Protection, showing how to detect and mitigate identity risks with real-time monitoring. By the end of the week, you will be able to Configure MFA and passwordless authentication methods, Design Conditional Access policies for secure access and Implement RBAC effectively at tenant, group, or resource scope.