> ## Content Index > Fetch the complete content index at: https://www.techielass.com/llms.txt > Use this file to discover other available public pages before exploring further. # SC-300 Study Guide: Microsoft Identity and Access Administrator - URL: https://www.techielass.com/sc-300-study-guide/ - Published: 2021-09-09T08:02:00.000Z - Updated: 2025-08-21T08:12:17.000Z - Description: In this blog post I share study resources to work towards the SC-300 Microsoft Identity and Access Administrator exam. - Author: Sarah Lean - Tags: Certification The SC-300 exam was released in 2021 and is the Microsoft Identity and Access Administrator. The exam is aimed at those who look after hybrid identity solutions or are part of a team that is looking after it. Below is a list of the exam objectives and some study resources that can be used to aid your study towards passing the exam. 👌 ### Implement an identity management solution (25-30%) **Implement initial configuration of Azure Active Directory** - [configure and manage Azure AD directory roles](https://docs.microsoft.com/learn/modules/implement-initial-configuration-of-azure-active-directory/2-configure-manage-roles?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure and manage custom domains](https://docs.microsoft.com/learn/modules/implement-initial-configuration-of-azure-active-directory/4-configure-manage-custom-domains?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure and manage device registration options](https://docs.microsoft.com/learn/modules/implement-initial-configuration-of-azure-active-directory/5-configure-manage-device-registration?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure delegation by using administrative units](https://docs.microsoft.com/learn/modules/implement-initial-configuration-of-azure-active-directory/6-configure-delegation-administrative-units?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure tenant-wide settings](https://docs.microsoft.com/learn/modules/implement-initial-configuration-of-azure-active-directory/7-configure-tenant-wide-options?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) **Create, configure, and manage identities** - [create, configure, and manage users](https://docs.microsoft.com/azure/active-directory/fundamentals/add-users-azure-active-directory?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [create, configure, and manage groups](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [manage licenses](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-whatis?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com#what-are-the-azure-ad-licenses) **Implement and manage external identities** - [manage external collaboration settings in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/external-identities/delegate-invitations?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [invite external users (individually or in bulk)](https://docs.microsoft.com/azure/active-directory/external-identities/tutorial-bulk-invite?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [manage external user accounts in Azure Active Directory](https://docs.microsoft.com/azure/active-directory/external-identities/use-dynamic-groups?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure identity providers (social and SAML/WS-fed)](https://docs.microsoft.com/azure/active-directory/fundamentals/auth-saml?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) **Implement and manage hybrid identity** - [implement and manage Azure Active Directory Connect (AADC)](https://docs.microsoft.com/azure/active-directory/hybrid/how-to-connect-install-roadmap?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement and manage Password Hash Synchronization (PHS)](https://docs.microsoft.com/azure/active-directory/hybrid/whatis-phs?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement and manage Pass-Through Authentication (PTA)](https://docs.microsoft.com/azure/active-directory/hybrid/how-to-connect-pta-quick-start?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement and manage seamless Single Sign-On (SSO)](https://docs.microsoft.com/azure/active-directory/hybrid/how-to-connect-sso-quick-start?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement and manage Federation excluding manual ADFS deployments](https://docs.microsoft.com/azure/active-directory/hybrid/whatis-fed?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement and manage Azure Active Directory Connect Health](https://docs.microsoft.com/azure/active-directory/hybrid/whatis-azure-ad-connect?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [troubleshoot synchronization errors](https://docs.microsoft.com/azure/active-directory/hybrid/tshoot-connect-objectsync?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) ## Implement an authentication and access management solution (25- 30%) **Plan and implement Azure Multifactor Authentication (MFA)** - [plan Azure MFA deployment (excluding MFA Server)](https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-deployment-plans?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement and manage Azure MFA settings](https://docs.microsoft.com/azure/active-directory/authentication/tutorial-enable-azure-mfa?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - manage MFA settings for users **Manage user authentication** - [administer authentication methods (FIDO2 / Passwordless)](https://docs.microsoft.com/azure/active-directory/authentication/concept-authentication-passwordless?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement an authentication solution based on Windows Hello for Business](https://docs.microsoft.com/windows/security/identity-protection/hello-for-business/hello-deployment-guide?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure and deploy self-service password reset](https://docs.microsoft.com/azure/active-directory/authentication/tutorial-enable-sspr?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [deploy and manage password protection](https://docs.microsoft.com/azure/active-directory/authentication/concept-password-ban-bad?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement and manage tenant restrictions](https://docs.microsoft.com/azure/active-directory/manage-apps/tenant-restrictions?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) **Plan, implement, and administer conditional access** - [plan and implement security defaults](https://docs.microsoft.com/azure/active-directory/fundamentals/concept-fundamentals-security-defaults?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [plan conditional access policies](https://docs.microsoft.com/azure/active-directory/conditional-access/concept-conditional-access-policies?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement conditional access policy controls and assignments (targeting, applications, and conditions)](https://docs.microsoft.com/azure/active-directory/conditional-access/overview?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [testing and troubleshooting conditional access policies](https://docs.microsoft.com/azure/active-directory/conditional-access/troubleshoot-conditional-access-what-if?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - implement application controls - [implement session management](https://docs.microsoft.com/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure smart lockout thresholds](https://docs.microsoft.com/azure/active-directory/authentication/howto-password-smart-lockout?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) **Manage Azure AD Identity Protection** - [implement and manage a user risk policy](https://docs.microsoft.com/azure/active-directory/reports-monitoring/howto-remediate-users-flagged-for-risk?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement and manage sign-in risk policies](https://docs.microsoft.com/azure/active-directory/authentication/tutorial-risk-based-sspr-mfa?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement and manage MFA registration policy](https://docs.microsoft.com/azure/active-directory/identity-protection/howto-identity-protection-configure-mfa-policy?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - monitor, investigate and remediate elevated risky users ## Implement Access Management for Apps (10-15%) **Plan, implement, and monitor the integration of Enterprise Apps for Single Sign-On (SSO)** - [implement and configure consent settings](https://docs.microsoft.com/learn/modules/plan-design-integration-of-enterprise-apps-for-sso/3-implement-access-management-for-apps?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.implement-access-management-for-apps&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [discover apps by using MCAS or ADFS app report](https://docs.microsoft.com/azure/active-directory/manage-apps/migrate-adfs-application-activity?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [design and implement access management for apps](https://docs.microsoft.com/learn/modules/plan-design-integration-of-enterprise-apps-for-sso/4-design-implement-app-management-roles?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.implement-access-management-for-apps&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [design and implement app management roles](https://docs.microsoft.com/learn/modules/plan-design-integration-of-enterprise-apps-for-sso/5-create-custom-role-manage-app-registration?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.implement-access-management-for-apps&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - monitor and audit access / Sign-Ons to Azure Active Directory integrated enterprise applications - [integrate on-premises apps by using Azure AD application proxy](https://docs.microsoft.com/azure/active-directory/app-proxy/what-is-application-proxy?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - integrate custom SaaS apps for SSO - [configure pre-integrated (gallery) SaaS apps](https://docs.microsoft.com/learn/modules/plan-design-integration-of-enterprise-apps-for-sso/6-configure-pre-integrated-gallery-saas-apps?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.implement-access-management-for-apps&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement application user provisioning](https://docs.microsoft.com/azure/active-directory/app-provisioning/user-provisioning?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) **Implement app registrations** - [plan your line of business application registration strategy](https://docs.microsoft.com/azure/active-directory/develop/quickstart-register-app?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement application registrations](https://docs.microsoft.com/learn/modules/implement-app-registration/3-implement-application-registration?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.implement-access-management-for-apps&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure application permissions](https://docs.microsoft.com/learn/modules/implement-app-registration/5-configure-application-permission?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.implement-access-management-for-apps&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement application authorization](https://docs.microsoft.com/learn/modules/implement-app-registration/7-implement-application-authorization?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.implement-access-management-for-apps&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - plan and configure multi-tier application permissions ## Plan and implement an Identity Governance Strategy (25-30%) **Plan and implement entitlement management** - [define catalogs](https://docs.microsoft.com/azure/active-directory/governance/entitlement-management-catalog-create?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [define access packages](https://docs.microsoft.com/azure/active-directory/governance/entitlement-management-access-reviews-create?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [plan, implement and manage entitlements](https://docs.microsoft.com/azure/active-directory/governance/entitlement-management-overview?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [implement and manage terms of use](https://docs.microsoft.com/azure/active-directory/conditional-access/terms-of-use?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com#what-can-i-do-with-terms-of-use) - [manage the lifecycle of external users in Azure AD Identity Governance settings](https://docs.microsoft.com/learn/modules/plan-implement-entitlement-management/6-manage-lifecycle-of-external-users?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.plan-implement-identity-governance-strategy&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) **Plan, implement, and manage access reviews** - [plan for access reviews](https://docs.microsoft.com/azure/active-directory/governance/deploy-access-reviews?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [create access reviews for groups and apps](https://docs.microsoft.com/azure/active-directory/governance/create-access-review?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [monitor access review findings](https://docs.microsoft.com/azure/active-directory/governance/access-reviews-downloadable-review-history?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [manage licenses for access reviews](https://docs.microsoft.com/azure/active-directory/governance/entitlement-management-overview?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com#license-requirements) - [automate access review management tasks](https://docs.microsoft.com/azure/active-directory/governance/deploy-access-reviews?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure recurring access reviews](https://docs.microsoft.com/learn/modules/plan-implement-manage-access-review/7-configure-recurring-access-reviews?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.plan-implement-identity-governance-strategy&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) Plan and implement privileged access - [define a privileged access strategy for administrative users (resources, roles, approvals, thresholds)](https://docs.microsoft.com/azure/active-directory/roles/security-planning?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure Privileged Identity Management for Azure AD roles](https://docs.microsoft.com/azure/active-directory/privileged-identity-management/pim-getting-started?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com#prepare-pim-for-azure-ad-roles) - [configure Privileged Identity Management for Azure resources](https://docs.microsoft.com/azure/active-directory/privileged-identity-management/pim-resource-roles-discover-resources?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [assign roles](https://docs.microsoft.com/azure/active-directory/privileged-identity-management/pim-how-to-add-role-to-user?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [manage PIM requests](https://docs.microsoft.com/azure/active-directory/privileged-identity-management/azure-ad-pim-approval-workflow?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [analyze PIM audit history and reports](https://docs.microsoft.com/azure/active-directory/privileged-identity-management/pim-how-to-use-audit-log?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [create and manage break-glass accounts](https://docs.microsoft.com/azure/active-directory/roles/security-emergency-access?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) **Monitor and maintain Azure Active Directory** - [analyze and investigate sign-in logs to troubleshoot access issues](https://docs.microsoft.com/azure/active-directory/reports-monitoring/howto-troubleshoot-sign-in-errors?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [review and monitor Azure AD audit logs](https://docs.microsoft.com/azure/active-directory/reports-monitoring/concept-audit-logs?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [enable and integrate Azure AD diagnostic logs with Log Analytics / Azure Sentinel](https://docs.microsoft.com/azure/sentinel/connect-azure-active-directory?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [export sign-in and audit logs to a third-party SIEM](https://docs.microsoft.com/learn/modules/monitor-maintain-azure-active-directory/5-export-logs-to-third-party-security-information?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.plan-implement-identity-governance-strategy&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [review Azure AD activity by using Log Analytics / Azure Sentinel, excluding KQL use](https://docs.microsoft.com/azure/sentinel/connect-azure-active-directory?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [analyze Azure Active Directory workbooks / reporting](https://docs.microsoft.com/azure/active-directory/reports-monitoring/howto-use-azure-monitor-workbooks?WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) - [configure notification](https://docs.microsoft.com/learn/modules/monitor-maintain-azure-active-directory/7-configure-notifications?ns-enrollment-type=LearningPath&ns-enrollment-id=learn.wwl.plan-implement-identity-governance-strategy&WT.mc%5Fid=modinfra-0000-salean&ref=techielass.com) 💡 ****New Resource:** Want to go beyond this blog? I’ve written a practical guide — [**How to Prepare for a Microsoft Exam*](https://leanpub.com/howtoprepareforamicrosoftexam?ref=techielass.com) — packed with tips, study strategies, and real-world advice to help you succeed.