Microsoft Identity and Access Administrator

The Microsoft Identity and Access Administrator Associate (SC-300) certification validates expertise in designing, implementing, and operating an organization's identity and access management systems using Microsoft Entra ID (formerly Azure Active Directory). Candidates configure authentication, manage identities, and implement access policies across cloud and hybrid environments. This role is critical for organizations adopting zero-trust security principles and modern identity-driven access controls.

Request Training Email Inquiry

What is the Microsoft Identity and Access Administrator Associate (SC-300) Certification?

Who Should Take This Course?

Identity administrators managing Microsoft Entra ID environments
IT security professionals implementing zero-trust identity strategies
Cloud engineers configuring Azure AD B2B, B2C, and external identities
Systems administrators transitioning to cloud-based identity management
Security operations engineers managing Privileged Identity Management (PIM)
Compliance professionals implementing conditional access and governance

What You Will Learn in the SC-300 Course

A comprehensive curriculum covering all exam objectives with hands-on labs and real-world practice.

Implement Identities in Microsoft Entra ID

Create and manage user, group, and device identities in Microsoft Entra ID.

Microsoft Entra ID — tenants, users, groups, and guest accounts
Azure AD Connect — hybrid identity synchronization and writeback
Device registration — Azure AD join, hybrid join, and Intune enrollment
External identities — B2B collaboration and cross-tenant access policies
Administrative units and delegated administration

Implement Authentication and Access Management

Configure secure authentication methods and access policies.

Authentication methods — passwords, FIDO2, Windows Hello, and certificate-based auth
Multi-Factor Authentication (MFA) — configuration and enforcement
Conditional Access policies — signals, controls, and named locations
Microsoft Entra ID Protection — risk-based Conditional Access
Self-Service Password Reset (SSPR) and password protection

Implement Access Management for Applications

App registrations — client credentials, redirect URIs, and API permissions
Enterprise applications — SSO with SAML, OIDC, and password-based SSO
Application Proxy — publishing on-premises apps with pre-authentication
Managed identities — system-assigned and user-assigned for Azure resources
OAuth 2.0 and OpenID Connect flows — authorization code, client credentials

Plan and Implement Identity Governance

Implement entitlement management, access reviews, and PIM.

Privileged Identity Management (PIM) — JIT access and role assignments
Entitlement management — access packages, policies, and catalogs
Access reviews — periodic review of group memberships and app access
Microsoft Entra Permissions Management — CIEM for multi-cloud environments
Terms of use and consent framework management

Course Prerequisites

Pre-requisites training is free when you purchase the course from ProSupport

Azure Administrator (AZ-104) or equivalent Azure identity management experience
Security Fundamentals (SC-900) or basic Microsoft security knowledge
Understanding of identity concepts — authentication, authorization, federation
Familiarity with Active Directory Domain Services (AD DS) concepts
Basic knowledge of OAuth 2.0, SAML 2.0, and OpenID Connect protocols
PowerShell or Microsoft Graph API experience is beneficial

Exam Information

Everything you need to know about the SC-300 certification exam.

Exam Component	Details
Exam Name	Microsoft Identity and Access Administrator
Exam Code	SC-300
Exam Type	Multiple Choice, Case Studies, Drag-and-Drop, Active Screen
Total Questions	40–60
Passing Score	700 (out of 1000)
Exam Duration	100 minutes
Language	English, Japanese, Chinese (Simplified), Korean, Spanish, German, French, Portuguese (Brazil)
Exam Provider	Microsoft / Pearson VUE
Exam Focus	Implementing and managing Microsoft Entra ID identities, authentication, application access, and governance
Exam Registration	Register at microsoft.com/en-us/learning or via Pearson VUE testing centers
Retake Policy	24 hours before first retake; 14 days before subsequent retakes; 5 attempts per year
Certification Validity	1 year — renewable via free online renewal assessment on Microsoft Learn