Learning Objectives

Course Outline

Module 1: Understanding Identity in Microsoft Entra ID

Describe the current identity landscape; examine zero trust principles as they apply to identity; discuss identity as a control plane; explain the purpose of identity; define identity administration; compare decentralized and centralized identity systems; review identity management solutions; explain Microsoft Entra Business to Business; compare Microsoft identity providers; outline identity licensing options; examine authentication and authorization concepts; describe auditing within identity systems.

Module 2: Initial Configuration of Microsoft Entra ID

Set up company branding; configure and manage Microsoft Entra roles; configure delegation using administrative units; review Microsoft Entra role permissions; configure and manage custom domains; adjust tenant-wide settings.

Module 3: Creating, Configuring, and Managing Identities

Create, configure, and manage user accounts; create, configure, and manage groups; set up and manage device registration; administer licenses; define custom security attributes; review automatic user creation processes.

Module 4: Implementing and Managing External Identities

Explain guest access and Business to Business accounts; manage external collaboration settings; invite external users individually and in bulk; administer guest users in Microsoft Entra ID; manage external user accounts in Microsoft Entra ID; handle external users across Microsoft 365 workloads; implement and manage Microsoft Entra Verified ID; configure identity providers; set up cross-tenant access controls.

Module 5: Implementing and Managing Hybrid Identity

Plan, design, and implement Microsoft Entra Connect; configure and manage password hash synchronization (PHS); configure and manage pass-through authentication (PTA); manage seamless single sign-on (SSO); implement and manage federation; troubleshoot synchronization errors; deploy Microsoft Entra Connect Health; manage Microsoft Entra Health.

Module 6: Securing Microsoft Entra Users with Multifactor Authentication

Describe Microsoft Entra multifactor authentication; plan a multifactor authentication deployment; configure available multifactor authentication methods.

Module 7: Managing User Authentication

Configure FIDO2 and passwordless authentication methods; review the Authenticator app and OATH tokens; set up an authentication solution using Windows Hello for Business; deploy and manage password protection; configure smart lockout thresholds; enable Kerberos and certificate-based authentication in Microsoft Entra ID; configure Microsoft Entra user authentication for virtual machines.

Module 8: Planning, Implementing, and Administering Conditional Access

Review security defaults; plan Conditional Access policies; configure Conditional Access policy controls and assignments; test and troubleshoot Conditional Access policies; set up application controls; configure session management; enable continuous access evaluation.

Module 9: Managing Microsoft Entra Identity Protection

Describe the fundamentals of identity protection; configure and manage user risk policy; monitor, investigate, and remediate elevated-risk users; apply security measures for workload identities; review Microsoft Defender for Identity capabilities.

Module 10: Implementing Access Management for Azure Resources

Assign Azure roles; define custom Azure roles; create and configure managed identities; use managed identities to access Azure resources; review Azure role permissions; configure Azure Key Vault RBAC policies; retrieve objects from Azure Key Vault; review Microsoft Entra Permissions Management.

Module 11: Deploying and Configuring Microsoft Entra Global Secure Access

Describe Global Secure Access; deploy and configure Microsoft Entra Internet Access; deploy and configure Microsoft Entra Private Access; use the dashboard to manage Global Secure Access; set up remote networks for Global Secure Access; apply Conditional Access policies with Global Secure Access; review logging and monitoring options within Global Secure Access.

Module 12: Planning and Designing Enterprise App Integration for SSO

Identify applications using Microsoft Defender for Cloud Apps and the Active Directory Federation Services app report; configure app connectors; design and implement app management roles; configure preintegrated gallery SaaS apps; manage policies for OAuth apps.

Module 13: Implementing and Monitoring Enterprise App Integration for SSO

Configure token customizations; set up and manage consent settings; connect on-premises apps through Microsoft Entra application proxy; configure custom SaaS apps for single sign-on; enable application-based user provisioning; monitor and audit access to Microsoft Entra integrated enterprise applications; create and manage application collections.

Module 14: Implementing App Registration

Develop a line-of-business application registration strategy; carry out application registration; register an application; configure application permissions; grant tenant-wide admin consent to applications; implement application authorization; monitor and manage applications using app governance.

Module 15: Registering Apps Using Microsoft Entra ID

Prepare a plan for app registration; review application objects and service principals; create app registrations; configure app authentication; set up API permissions; define app roles.

Module 16: Planning and Implementing Entitlement Management

Define access packages; configure entitlement management settings; set up and manage connected organizations; examine per-user entitlements.

Module 17: Planning, Implementing, and Managing Access Reviews

Prepare a plan for access reviews; create access reviews for groups and applications; set up and configure access review programs; track access review findings; automate access review management tasks; schedule recurring access reviews.

Module 18: Planning and Implementing Privileged Access

Define a privileged access strategy for administrative users; configure Privileged Identity Management for Azure resources; plan and configure Privileged Access Groups; review Privileged Identity Management audit history and reports; create and maintain emergency access accounts.

Module 19: Monitoring and Maintaining Microsoft Entra ID

Examine and investigate sign-in logs to resolve access issues; review Microsoft Entra audit logs; export logs to third-party SIEM systems; interpret Microsoft Entra workbooks and reports; track security posture using Identity Secure Score.

Module 20: Exploring Microsoft Entra Permissions Management Features

Support all cloud environments from a unified experience; review high-level insights in the Permissions Management dashboard; perform deeper analysis using the Analytics tab; generate reports to better understand your environment; examine historical data through the Audit tab; address findings using the Remediation tab; implement continuous monitoring for a proactive approach; control access to Microsoft Entra Permissions Management.