Skip to main content
Ace Skills Consulting
Microsoft logoIntermediate

SC-300: Identity and Access Administrator

Design and run secure identity with Microsoft Entra — from sign-in to governance — and prepare for the SC-300 exam.

  • 32 hours of live, hands-on sessions
  • Hybrid identity, MFA and Conditional Access labs
  • Workload identities and app integration
  • Entitlement management, access reviews and PIM
  • Mapped to the four SC-300 skill areas
Aligned to Microsoft exam SC-300
Duration
4 Days | 32 Hrs
Next batch
Batches on request
Delivery
Live Online · Onsite · Corporate
Level
Intermediate
Exam
SC-300
Language
English

Why learn SC-300 with Ace Skills

  • Secure sign-in without friction

    You design MFA, passwordless and Conditional Access policies that protect accounts while keeping users productive.

  • Governance that scales

    Access packages, reviews and lifecycle workflows replace manual access requests and forgotten permissions.

  • Apps connected properly

    SSO, app registrations and managed identities are configured hands-on, so integrations stay secure and auditable.

  • Troubleshooting with evidence

    Sign-in logs and What If testing teach you to explain exactly why access was granted or blocked.

Course overview

Identity is now the main security boundary. Most breaches begin with a compromised account, and most access problems come from unclear ownership of who should have what. Identity and access administrators solve both: they make sign-in secure and convenient, and they make sure access is granted, reviewed and removed in a controlled way. This four-day course builds those skills with Microsoft Entra.

Day one covers user identities: tenant configuration, users and groups, external collaboration with B2B, and hybrid identity with Microsoft Entra Connect and Cloud Sync. Day two focuses on authentication and access — MFA, passwordless methods, Conditional Access design, Identity Protection and Global Secure Access concepts.

Day three addresses workload identities and applications: enterprise apps, single sign-on, app registrations, managed identities and consent governance. Day four covers identity governance — entitlement management, access reviews, lifecycle workflows and Privileged Identity Management — along with monitoring and exam preparation.

Labs build a realistic organisation step by step, so you finish with a tenant whose identity, access and governance you designed and tested yourself.

The course is aligned to the SC-300 exam. Microsoft Entra features evolve quickly and the outline is updated periodically, so check the current skills measured on Microsoft Learn before booking.

Key features

  • Hybrid identity with Entra Connect and Cloud Sync
  • Conditional Access design with report-only testing
  • Passwordless and phishing-resistant authentication
  • SSO and app registration labs
  • Entitlement management, access reviews and PIM
  • Sign-in log analysis and troubleshooting
  • 30 days of post-training doubt support

Who should attend

  • Identity and access administrators
  • Microsoft 365 and Azure administrators managing users and access
  • Security engineers responsible for identity controls
  • IT administrators moving into identity roles

Prerequisites

  • Experience administering users and groups in Microsoft 365 or Active Directory
  • Understanding of authentication concepts
  • Security and identity fundamentals (SC-900 level recommended)

Curriculum

4 Days · 32 Hours · 13 Modules · 11 Labs

  1. Tenant and user management

    • Tenant configuration and custom domains
    • Users, groups and dynamic groups
    • Administrative units and roles
    • Licence management
    • Lab: Configure dynamic groups and administrative units · 45 min

    External identities

    • B2B collaboration and cross-tenant access settings
    • Guest user lifecycle
    • External ID overview
    • Lab: Invite and govern partner users with B2B · 35 min

    Hybrid identity

    • Microsoft Entra Connect vs Cloud Sync
    • Password hash sync, pass-through and federation
    • Seamless SSO
    • Sync troubleshooting
    • Lab: Synchronise users with Entra Cloud Sync · 50 min

  2. Authentication methods

    • MFA and authentication strengths
    • Passkeys, FIDO2 and Windows Hello for Business
    • Self-service password reset
    • Password protection
    • Lab: Roll out passwordless sign-in with authentication strengths · 45 min

    Conditional Access

    • Policy components and design
    • Report-only mode and What If
    • Device-based and location-based controls
    • Session controls
    • Lab: Design and test a Conditional Access policy set · 60 min

    Identity Protection and network access

    • User and sign-in risk policies
    • Risky user remediation
    • Global Secure Access concepts
    • Lab: Configure risk-based policies · 30 min

  3. Enterprise applications

    • Gallery apps and SAML/OIDC single sign-on
    • User provisioning
    • Application Proxy
    • App collections
    • Lab: Configure SSO and provisioning for a SaaS app · 50 min

    App registrations

    • App registrations and service principals
    • API permissions and consent
    • Admin consent workflow
    • Credential hygiene
    • Lab: Register an app and govern its permissions · 45 min

    Managed and workload identities

    • Managed identities for Azure resources
    • Workload identity federation
    • Monitoring app sign-ins
    • Lab: Replace a client secret with workload identity federation · 40 min

  4. Entitlement management

    • Catalogues and access packages
    • Approval and expiry policies
    • Connected organisations
    • Lab: Build an access package with approval and expiry · 45 min

    Reviews, lifecycle and PIM

    • Access reviews
    • Lifecycle workflows for joiners, movers and leavers
    • Privileged Identity Management for roles and groups
    • Lab: Configure PIM and a quarterly access review · 45 min

    Monitoring

    • Sign-in and audit logs
    • Workbooks and log export
    • Identity secure score

    Exam readiness

    • Exam structure and case studies
    • Practice questions with review
Download full syllabus (PDF)

Skills you will gain

  • Microsoft Entra ID
  • Hybrid identity
  • Entra Cloud Sync
  • MFA
  • Passwordless
  • Conditional Access
  • Identity Protection
  • Single sign-on
  • App registrations
  • Workload identities
  • Entitlement management
  • Access reviews
  • Privileged Identity Management

Tools & technologies

  • Microsoft Entra admin center
  • Microsoft Entra Connect
  • Microsoft Graph PowerShell
  • Azure portal
  • Log Analytics

Certification exam

Exam details
Exam nameMicrosoft Certified: Identity and Access Administrator Associate
Exam codeSC-300
Duration100 minutes
Passing score700 / 1000 (scaled)
Voucher includedNo — book directly with the vendor
Question formatMultiple choice, Multiple response, Drag and drop, Case study
DeliveryOnline proctored or Test centre
Validity & renewal1 year (free online renewal assessment)

Skill areas measured

  1. Implement and manage user identities
  2. Implement authentication and access management
  3. Plan and implement workload identities
  4. Plan and automate identity governance

Exam details are pending verification. Vendors change exams; confirm on the official vendor page before booking. Official exam page (opens in a new tab)

Schedule & Pricing

Live Online

Individual

Price on request

  • 32 hours of live, trainer-led sessions
  • 11 hands-on labs
  • Ace Skills course completion certificate

Onsite

At your office or our centre

Pricing depends on location, group size and dates.

  • Delivered at your premises or an Ace centre
  • Same curriculum and labs as live online
  • Dates planned around your team

Corporate / Team

Private batch for your organisation

A private batch with content adapted to your environment and goals.

  • Customised curriculum
  • Private batch, online or onsite
  • Progress and assessment reports
  • GST invoice and PO-based billing

No public batches scheduled — Talk to an Advisor for a private batch.

Projects & labs you will build

  • Day 2 · 60 min

    Design and test a Conditional Access policy set

  • Day 4 · 45 min

    Configure PIM and a quarterly access review

Your certificate

Certificate of Completion — Ace Skills Consulting

Awarded on completing the course. It records the course title and training hours, and you can share it on your LinkedIn profile.

The Microsoft certification itself is awarded by Microsoft when you pass exam SC-300.

Frequently asked questions

Do I need Active Directory experience?

Basic user and group administration is enough. Hybrid identity is taught from the fundamentals.

Do the labs need premium Entra licences?

Yes, features such as PIM and Identity Protection need premium licences, which are included in the lab tenant arranged for the course.

How is SC-300 different from SC-500?

SC-300 focuses on identity and access with Microsoft Entra, while SC-500 covers wider cloud and AI workload security.

What happens if Microsoft updates the SC-300 exam?

We map the curriculum to the current published skills outline and revise it when Microsoft changes the exam. Always check the latest outline on Microsoft Learn before booking.

Do you run weekend batches?

Yes. Weekend batches cover the same 32 hours across consecutive Saturdays and Sundays, with timings in IST that also suit learners in the Gulf.

Can you run a private batch for our team?

Yes. We run private online or onsite batches for corporate teams, and we can weight the labs towards your identity governance requirements. Request a corporate quote with your team size and preferred dates.

Related courses

Explore more

All Microsoft Data, 365 & Security courses Microsoft certifications

Microsoft, Azure, Microsoft 365, Power BI and Microsoft Entra are trademarks of the Microsoft group of companies.

Train your team on SC-300

Private batches online or at your office in India and the GCC, with a curriculum adapted to your environment.