Master Azure AD identity management, implement authentication and access solutions, and manage identity governance for secure enterprise environments.
Identity and Access Administrators design, implement, and manage Azure AD identity and access management solutions. You'll configure authentication methods including MFA and passwordless, manage conditional access policies, implement privileged identity management, handle app registrations and SSO, and oversee identity governance including access reviews and entitlement management.
Prerequisites
Before Phase 1Identity & Access Admin
After Phase 3-4The official Microsoft SC-300 exam tests your knowledge across four key skill areas:
If you're new to Identity and Access Management:
→Begin with Phase 1: Master Azure AD Identity Management (expand below)
→Complete AZ-104 or SC-900 first for foundational Azure knowledge
→Don't worry about advanced governance topics until Phase 4
→Focus on one phase at a time – finish it completely before moving forward
Already have some experience?
→Jump to the phase that matches your current skill level
Create and manage users, groups, dynamic groups, group membership rules
Azure AD join, device registration, device-based conditional access
External identities, guest users, cross-tenant access, B2C tenant setup
Azure AD Connect, password hash sync, pass-through auth, federation
Configure MFA, authentication methods, MFA policies, security defaults
Conditional access policies, named locations, session controls, risk-based policies
Just-in-time access, privileged roles, approval workflows, access reviews for privileged roles
Windows Hello for Business, FIDO2 security keys, Microsoft Authenticator app
Register applications, configure redirect URIs, certificates and secrets, API permissions
Configure SSO for enterprise apps, SAML-based SSO, password-based SSO
Delegated vs application permissions, consent, OAuth 2.0 flows, Microsoft Graph
Publish on-premises apps, configure connectors, pre-authentication
Create access reviews, review group membership, review app assignments, remediation
Access packages, catalogs, policies, request and approval workflows
Lifecycle workflows, provisioning, deprovisioning, HR-driven provisioning
Sign-in logs, audit logs, Azure Monitor integration, identity protection reports
SC-300: Microsoft Identity and Access Administrator
This certification validates your expertise in implementing and managing identity and access solutions using Azure AD. It's essential for security-focused roles and identity architects.
Practice SC-300 QuestionsConfigure users, groups, devices, and external identities across hybrid environments
Secure authentication with MFA, passwordless methods, and risk-based policies
Implement just-in-time privileged access and approval workflows
Register apps, configure SSO, and manage API permissions with OAuth
Configure access reviews, entitlement management, and lifecycle workflows
Validate your expertise with Microsoft's Identity and Access Administrator credential