Content

• Prerequisite
• Before attending this course, participants should have the following knowledge:
• - Security best practices and industry standard security requirements such as "Defense in Depth", "Least Privileged Access", "Shared Responsibility" and "Zero Trust Model".
• - You should be familiar with identity concepts such as authentication, authorization and Active Directory.
• - You have experience deploying Azure workloads. This course does not cover the basics of Azure administration, instead the course content builds on this knowledge and adds security specific information.
• - Some experience with Windows and Linux operating systems and scripting languages is helpful, but not required. PowerShell and the CLI may be used in the course exercises.
• Prerequisite courses (or equivalent knowledge and practical experience):
• This free online training will give you the experience you need to be successful in this course.
• - SC-900 Part 1: Describe the concepts of security, compliance, and identity - Learn | Microsoft Docs
• - SC-900 Part 2: Describe the features of Microsoft Identity and Access Management solutions - Learn | Microsoft Docs
• - SC-900 Part 3: Describe the capabilities of Microsoft security solutions - Learn | Microsoft Docs
• - SC-900 Part 4: Describe the capabilities of Microsoft compliance solutions - Learn | Microsoft Docs
• - AZ-104: Manage identities and governance in Azure - Learn | Microsoft Docs
• Module 1: Exploring identity in Azure AD (optional)
• This is an optional introductory module that covers the basic concepts of identity and access management with Azure AD. Learn the definitions and purpose of zero trust, authentication, authorization, tokens, and other identity-related topics.
• Lesson
• - What is identity in Azure
• After completing this module, participants will be able to
• - Define common identity terms and explain how they are used in the Microsoft Cloud
• - Explain the common management tools and the requirements for an identity solution
• - Explain the goal of Zero Trust and how it is applied in the Microsoft Cloud
• - Explain the identity services available in the Microsoft Cloud
• Module 2: Implementing an identity management solution
• You will learn to create and manage your Azure Active Directory (Azure AD) implementation and configure the users, groups and external identities that you will use to operate your solution. You will also learn to configure and manage a hybrid identity solution.
• Lesson
• - Configure and manage Azure Active Directory
• - Create, configure and manage identities
• - Implementing and managing external identities
• - Implementing and managing hybrid identities
• Exercise: Managing user roles
• Lab : Working with tenant properties
• Exercise: Assigning licenses using group memberships
• Exercise: Configuring settings for external collaboration
• Lab : Adding guest users to the directory
• Lab : Adding a federated identity provider
• Lab: Adding a hybrid identity with Azure AD Connect
• After completing this module, participants will be able to
• - Set up and configure Azure AD with custom enterprise settings
• - Manage both internal and external identities
• - Implement a hybrid identity solution
• Module 3: Implementing an authentication and access management solution
• Implement and manage your access management with Azure AD Use MFA, conditional access and identity protection to manage your identity solution.
• Lesson
• - Plan and implement multifactor authentication (MFA)
• - Manage user authentication
• - Plan, implement and manage access controls
• - Managing identity protection
• - Implementing access management for Azure resources
• Exercise: Enable Azure AD multi-factor authentication
• Lab: Enable Azure AD self-service password reset
• Lab: Azure AD authentication for Windows and Linux virtual machines
• Lab: Assign Azure resource roles in Privileged Identity Management
• Lab: Manage Azure AD Smart Lockout values
• Lab: Implement and test a conditional access policy
• Lab: Enable sign-in and user risk policies
• Lab: Configure an enrollment policy for Azure AD multi-factor authentication
• Lab: Using Azure Key Vault for managed identities
• After completing this module, participants will be able to
• - Perform and manage user authentication including MFA and SSPR
• - Control access to resources with conditional access
• - Use Azure AD identity protection to protect your organization
• Module 4: Implement access management for applications
• Explore how applications can and should be added to your identity and access solution with application registration in Azure AD. Register and manage new applications in your environment.
• Lesson
• Plan and design the integration of enterprise apps for SSO
• Implement and monitor enterprise app integration and configure for SSO
• Implement app registration
• Exercise: Defender for Cloud Apps access policies
• Exercise: Registering an application
• Exercise: Implement access management for apps
• Lab: Granting tenant-wide admin consent to an application
• After completing this module, participants will be able to
• - Register a new application in your Azure AD directory
• - Plan and implement SSO for enterprise applications
• - Monitor and maintain enterprise applications
• Module 5: Plan and implement an identity governance strategy
• Design and implement identity governance for your identity solution using permissions, access auditing, privileged access, and monitoring of your Azure Active Directory (Azure AD).
• Lesson
• - Plan and implement authorization management
• - Plan, implement and manage access checks
• - Plan and implement privileged access
• - Monitor and maintain Azure Active Directory
• Lab: Creating and managing a resource catalog in Azure AD permissions management
• Lab: Adding terms of use and acceptance reports
• Lab: Manage the lifecycle of external users in Azure AD Identity Governance settings
• Lab: Creating access reviews for internal and external users
• Lab: Configure Privileged Identity Management (PIM) for Azure AD roles
• Lab: Explore Microsoft Sentinel and use Kusto Queries to verify Azure AD data sources
• Lab: Monitor and manage your security posture with Identity Secure Score
• After completing this module, participants will be able to
• - Manage and maintain Azure AD from creation to solutions
• - Use access auditing to manage your Azure AD
• - Grant access to users using authorization management
• Reference:
• Upon completion of the course
• - Upon completion of this course, participants will be able to
• - Implement an identity management solution
• - Implement an authentication and access management solution
• - Implement access management for applications
• - Plan and implement an identity governance strategy