Explore identity in Microsoft Entra ID

This module covers definitions and available services for identity, provided in Microsoft Entra ID. Explore authentication, authorization, and access tokens, then build into full identity solutions.

Learning objectives

By the end of this module, you're able to:

• Define common identity terms and explain how they're used in the Microsoft Cloud.
• Explore the common management tools and needs of an identity solution.
• Review the goal of Zero Trust and how it applies in the Microsoft Cloud.
• Explore the available identity services in the Microsoft Cloud.
• Explain the identity landscape
• Explore Zero Trust with identity
• Discuss identity as a control plane
• Explore why we have identity
• Define identity administration
• Contrast decentralized identity with central identity systems
• Discuss identity management solutions
• Explain Microsoft Entra Business to Business
• Compare Microsoft identity providers
• Define identity licensing
• Explore authentication
• Discuss authorization
• Explain auditing in identity

Implement initial configuration of Microsoft Entra ID

Learn to create an initial Microsoft Entra ID configuration to ensure all the identity solutions available in Azure are ready to use. This module explores how to build and configure a Microsoft Entra system.

• Configure company brand
• Configure and manage Microsoft Entra roles
• Exercise manage users roles
• Configure delegation by using administrative units
• Analyze Microsoft Entra role permissions
• Configure and manage custom domains
• Configure tenant-wide setting
• Exercise - setting tenant-wide properties

Create, configure, and manage identities

Access to cloud-based workloads needs to be controlled centrally by providing a definitive identity for each user and resource. You can ensure employees and vendors have just-enough access to do their job.

• Create, configure, and manage users
• Exercise - assign licenses to users
• Exercise - restore or remove deleted users
• Create, configure, and manage groups
• Exercise - add groups in Microsoft Entra ID
• Configure and manage device registration
• Manage licenses
• Exercise - change group license assignments
• Exercise - change user license assignments
• Create custom security attributes
• Explore automatic user creation

Implement and manage external identities

Inviting external users to use company Azure resources is a great benefit, but you want to do it in a secure way. Explore how to enable secure external collaboration.

• Describe guest access and Business to Business accounts
• Manage external collaboration
• Exercise - configure external collaboration
• Invite external users - individually and in bulk
• Exercise - add guest users to directory
• Exercise - invite guest users bulk
• Demo - manage guest users in Microsoft Entra ID
• Manage external user accounts in Microsoft Entra ID
• Manage external users in Microsoft 365 workloads
• Exercise - explore dynamic groups
• Implement and manage Microsoft Entra Verified ID
• Configure identity providers
• Implement cross-tenant access controls

Implement and manage hybrid identity

Creating a hybrid-identity solution to use your on-premises active directory can be challenging. Explore how to implement a secure hybrid-identity solution.

• Plan, design, and implement Microsoft Entra Connect
• Implement manage password hash synchronization (PHS)
• Implement manage pass-through authentication (PTA)
• Explore pass-through authentication and seamless single sign-on (SSO)
• Implement and manage federation
• Trouble-shoot synchronization errors
• Implement Microsoft Entra Connect Health
• Manage Microsoft Entra Health

Secure Microsoft Entra users with multifactor authentication

Learn how to use multifactor authentication with Microsoft Entra ID to harden your user accounts.

• What is Microsoft Entra multifactor authentication?
• Plan your multifactor authentication deployment
• Exercise - Enable Microsoft Entra multifactor authentication
• Configure multifactor authentication methods

Manage user authentication

There are multiple options for authentication in Microsoft Entra ID. Learn how to implement and manage the right authentications for users based on business needs.

• Administer FIDO2 and passwordless authentication methods
• Explore Authenticator app and OATH tokens
• Implement an authentication solution based on Windows Hello for Business
• Exercise configure and deploy self-service password reset
• Deploy and manage password protection
• Configure smart lockout thresholds
• Exercise - Manage Microsoft Entra smart lockout values
• Implement Kerberos and certificate-based authentication in Microsoft Entra ID
• Configure Microsoft Entra user authentication for virtual machines

Plan, implement, and administer Conditional Access

Conditional Access gives a fine granularity of control over which users can do specific activities, access which resources, and how to ensure data and systems are safe.

• Plan security defaults
• Exercise - Work with security defaults
• Plan Conditional Access policies
• Implement Conditional Access policy controls and assignments
• Exercise - Implement Conditional Access policies roles and assignments
• Test and troubleshoot Conditional Access policies
• Implement application controls
• Implement session management and continuous access evaluation
• Exercise - Configure authentication session controls
• Microsoft Entra Conditional Access Optimization agent

Manage Microsoft Entra Identity Protection

Protecting a user's identity by monitoring their usage and sign-in patterns ensure a secure cloud solution. Explore how to design and implement Microsoft Entra Identity protection.

• Review identity protection basics
• Implement and manage user risk policy
• Exercise enable sign-in risk policy
• Exercise configure Microsoft Entra multifactor authentication registration policy
• Monitor, investigate, and remediate elevated risky users
• Implement security for workload identities
• Explore Microsoft Defender for Identity
• Explore the Identity Risk Management Agent

Implement access management for Azure resources

Explore how to use built-in Azure roles, managed identities, and RBAC-policy to control access to Azure resources. Identity is the key to secure solutions.

• Assign Azure roles
• Configure custom Azure roles
• Create and configure managed identities
• Access Azure resources with managed identities
• Analyze Azure role permissions
• Configure Azure Key Vault RBAC policies
• Retrieve objects from Azure Key Vault

Deploy and Configure Microsoft Entra Global Secure Access

Global Secure Access lets you put identity as the gatekeeper to your network access. Use Zero Trust principles to protect your data and apps.

• Explore Global Secure Access
• Deploy and configure Microsoft Entra Internet Access
• Deploy and configure Microsoft Entra Private Access
• Explore how to use the Dashboard to drive Global Secure Access
• Create remote networks for use with Global Secure Access
• Use Conditional Access with Global Secure Access
• Explore logs and monitoring options with Global Secure Access