SC-300 · Guided course

Microsoft Certified: Identity and Access Administrator Associate course

Manage workforce identities, authentication, application access, and identity governance in Microsoft Entra.

Exam scope: SC-300 · Skills measured April 27, 2026

Current scope and updates: The April 27, 2026 skills remain the active English blueprint through October 27. Microsoft has announced an English-language update effective October 28, 2026; this route must be remapped at cutover.

16 objective lessons · 77 learning blocks · 174 distinct taught concepts

Open the course path

These lessons and checks are currently available as preview study material. Each block names its required provider or ITForMe lesson; optional provider products may have their own costs.

How you will study

Study one learning block. Use its assigned provider lesson when one has been verified. Where no suitable assignment has been verified, study the required ITForMe teaching. Other explanations and guided practice remain available for support.
Confirm study and take its short check. Opening a page or provider link does not complete a block. A passing current check is required for course progress.
Review and continue. Today suggests the next activity using your study and review history. Review helps you revisit earlier concepts while you learn new material.

Trace the identity, credential, token, assignment, policy decision, resource, and audit record for each access request.

A topic preview · Objective 1.1

Configure and manage a Microsoft Entra tenant

This is a short excerpt of ITForMe concept notes. It shows the kind of explanation available here; it is not the complete lesson or a scored check.

Custom domain name: Lets tenant identities use an organization's verified DNS domain instead of the initial tenant name.
Company branding: Adds an organization's logo, background, sign-in text, and related visual elements to Microsoft Entra authentication pages.
Administrative unit: Scopes selected directory administration to a defined set of users, groups, or devices.
Microsoft Entra built-in role: Grants a fixed Microsoft-defined set of directory permissions for a common administrative task.

Open this lesson →

Applied practice: Use a fictional tenant. Draw one access path, apply least privilege, test an exception, and name the logs that would confirm the result.

Course topics

These are the current objective lessons in this course. Their presence describes the shipped study scope; it does not establish exam equivalence or independent approval.

Browse 16 objective lessons

1.1 · Implement and manage user identitiesConfigure and manage a Microsoft Entra tenant
1.2 · Implement and manage user identitiesCreate, configure, and manage Microsoft Entra identities
1.3 · Implement and manage user identitiesManage external users and cross-tenant access
1.4 · Implement and manage user identitiesImplement and manage hybrid identity
2.1 · Implement authentication and access managementPlan and implement Microsoft Entra user authentication
2.2 · Implement authentication and access managementPlan, implement, and manage Conditional Access
2.3 · Implement authentication and access managementManage identity risk with Microsoft Entra ID Protection
2.4 · Implement authentication and access managementImplement secure access with Microsoft Entra Global Secure Access
3.1 · Plan and implement workload identitiesPlan and implement identities for applications and Azure workloads
3.2 · Plan and implement workload identitiesPlan, implement, and monitor the integration of enterprise applications
3.3 · Plan and implement workload identitiesPlan and implement app registrations
3.4 · Plan and implement workload identitiesManage and monitor application access with Microsoft Defender for Cloud Apps
4.1 · Plan and automate identity governancePlan and implement entitlement management
4.2 · Plan and automate identity governancePlan, implement, and manage access reviews
4.3 · Plan and automate identity governancePlan and implement privileged access
4.4 · Plan and automate identity governanceMonitor identity activity by using logs, workbooks, and reports

Review status and preparation limits

0 of 16 objective lessons currently have named independent subject-matter review. Internal and automated checks are separate from that review. Question and practice-scenario review status is shown on those activities.

ITForMe is not affiliated with or endorsed by Microsoft. These original lessons and checks are not official exam questions, a vendor exam replica, or a pass predictor. Use the vendor's published requirements and additional practice to judge your preparation.

Official Microsoft Certified: Identity and Access Administrator Associate certification information ↗Review methodology Compare courses Search course topics

You can explore before signing in. Anonymous progress depends on this browser's session; clearing its site data can make saved work inaccessible. Sign in to keep progress with your account.