Skip to content
CBT Nuggets
DemoBook a Demo

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

This Microsoft Identity and Access Administrator (SC-300) training prepares you to become a Microsoft identity and access admin. Expert-led training will teach you to implement and manage secure identity solutions using Microsoft Entra ID (Azure AD) and hybrid identities. You’ll set up and manage users, groups, devices, and custom roles. You’ll learn to configure passwordless and multifactor sign-in, apply conditional access policies, and use tools like PIM to support a zero-trust strategy. You’ll also manage app access with registrations, service principals, and entitlement controls. Bring on-prem and cloud together using Azure AD Connect and Active Directory Federation Services, and monitor and protect identities using Defender for Cloud Apps, Sentinel, Identity Protection and Identity Secure Score. With practice exams and real‑world scenarios, this course maps to the SC‑300 exam blueprint, giving you the skills and confidence to get certified and secure access to your organization’s cloud resources.

Updated September 2022

18Skills
135Videos
1Practice Exam
18hTotal

Who This Course Is For

This Microsoft Identity and Access Administrator (SC-300) training is considered professional-level Azure training for security pros. This Azure skills course is designed for security professionals with three to five years of experience with cyber and network security.

Skills Your Team Will Gain

  • Design and implement identity solutions with Microsoft Entra ID and hybrid Azure AD
  • Manage user, group and device identities across cloud and on‑premises environments
  • Deploy passwordless and multifactor authentication with conditional access and PIM
  • Control application access via app registrations, service principals and role assignments
  • Implement identity governance with access packages, entitlement management and periodic reviews
  • Monitor and troubleshoot identities using tools like Identity Protection, Sentinel, Log Analytics and Kusto queries

Course Curriculum

One skill is free to watch — no signup needed. The other 17 premium skills unlock for your whole team with a CBT Nuggets plan.

Free skill preview

Azure MFA and User Authentication

Bob SalmansDuration: 1h 49m28 videos

Watch this complete skill free — the same trainer, videos, and labs your team gets with a plan.

Watch free skill
  • Premium skill.Azure Active Directory Initial Configuration1h 6m · 18 videos
  • Premium skill.Azure AD User, Groups and Licenses55m · 14 videos
  • Premium skill.Azure AD Hybrid Identities56m · 14 videos
  • Premium skill.Azure AD External Identities51m · 16 videos
  • Azure MFA and User AuthenticationFree1h 49m · 28 videos
  • Premium skill.Conditional Access and Identity Protection1h 6m · 18 videos
  • Premium skill.Implement Access Management for Azure Resources48m · 16 videos
  • Premium skill.Deploying Enterprise Applications in Azure AD1h 18m · 22 videos
  • Premium skill.Application Registration in Azure AD48m · 14 videos
  • Premium skill.Azure Entitlement Management1h 20m · 20 videos
  • Premium skill.Azure Access Reviews51m · 14 videos
  • Premium skill.Azure Privileged Identity56m · 12 videos
  • Premium skill.Azure AD Management49m · 16 videos
  • Premium skill.Using Azure Monitor and Identity Secure Score59m · 14 videos
  • Premium skill.Manage and monitor application access using Defender for Cloud Apps52m · 14 videos
  • Premium skill.Entra Global Secure Access - Introduction47m · 15 videos
  • Premium skill.Entra Global Secure Access - Configuration51m · 20 videos
  • Premium skill.Changing Source of Authority to Entra ID51m · 15 videos
Want to browse the locked skills?
with no purchase required. Already have an account?

An account gets you the full catalog to browse, pre-assessments, quiz questions on free skills, and IT Trainerbot, with every answer citing its source video.

Certification

Identity and Access Administrator Associate (SC-300)

The Microsoft Certified: Identity and Access Administrator Associate validates the skills to design, implement, and manage identity and access management systems, including identity protection, access management, and identity governance. This certifi...

Exam SC-300Level AssociateDifficulty IntermediateCost $165
Identity and access managementAzure Active DirectoryConditional AccessIdentity governanceAccess reviewsPrivileged Identity Management
Official certification page

Put this course to work for your team

Every subscription includes this course with the full library, virtual labs, and practice exams — or talk it through with sales.

For IT leaders

What IT leaders need to know before assigning this course

Identity is now the front door to your cloud. A misconfigured conditional access policy, an over-privileged role assignment, or a stale guest account can lock out users or open a gap that shows up in your next audit. This SC-300 course gives your identity and security staff a shared, repeatable way to run Microsoft Entra ID (Azure AD).

Role fit: Assign it to security practitioners and Team Leads with three to five years of cyber and network security experience who own, or will soon own, identity in Microsoft 365 and Azure. It works for a single identity owner and for a larger team splitting duties across authentication, app access, and governance.

Time investment: About 18 hours of video across 18 skills, so most learners can finish in four to six weeks at a few hours per week. Plan extra time for hands-on practice and exam prep.

Risk and compliance: The course covers least-privilege role-based access control, Privileged Identity Management, access reviews for security governance, entitlement management with time-bound access, and day-to-day identity management tasks such as restoring users and reviewing audit logs for users and groups. These are the controls auditors commonly ask about.

Change management: The instructor stresses rolling out conditional access policies to a small test group before applying them broadly, and shows how to troubleshoot failed MFA sign-ins. Later skills help teams plan and manage identity governance, app access, and Azure resource access without disrupting users.

How CBT Nuggets supports it: Practice exams aligned to the SC-300 blueprint help confirm readiness before exam day. Playlists let Training Managers sequence skills by role, and Team Reporting gives IT Directors visibility into progress and certification readiness.

Team Impact

How this training helps your team succeed

Identity is now the front door to every cloud resource your organization runs. This training prepares IT teams to secure that door in Microsoft Entra ID (Azure AD) using workflows they will run in production, without disrupting the users who depend on it.

  • Fewer lockouts from risky policy changes: Your team learns to pilot conditional access policies against a small test group first, then troubleshoot sign-in failures before a rollout affects the whole organization.
  • Faster help desk resolution for MFA issues: IT Practitioners learn to use sign-in logs to find the specific failure reason behind a user's MFA problem, and to tell real failures apart from expected interruptions in the login flow.
  • Cleaner app access administration: Teams practice Microsoft Entra app access workflows and managed identities, including when to use user-assigned managed identities instead of embedding credentials in applications.
  • Audit-ready access governance: Teams work with entitlement management access packages, access reviews, Azure roles, and custom roles to support least-privilege administration. Identity Secure Score recommendations help teams identify improvements, such as using least-privileged administrative roles.

The course also covers hybrid environments. Teams learn to troubleshoot Azure AD Connect synchronization, publish on-premises apps through Application Proxy, and set up Global Secure Access web content filtering, so cloud and on-premises identity stay aligned.

After completion

Capabilities your team walks away with

After this course, IT teams can run Microsoft Entra ID (Azure AD) identity and access with fewer sign-in tickets and stronger audit readiness.

Knowledge

  • How IAM foundations map to an Entra ID structure of users, groups, licenses, and devices
  • The difference between joining and registering devices, and when to require MFA for device enrollment
  • Why role-based access control is preferred over Key Vault access policies, and how to apply least privilege
  • How SSO and provisioning support secure app access
  • How entitlement management, access reviews, and PIM support security governance
  • The three-step Internet Access build: content filtering policy, security profile, and conditional access policy

Ability

  • Enable per-user MFA and troubleshoot failed sign-ins using sign-in log failure reasons
  • Pilot conditional access policies with a test group before broad rollout, then troubleshoot them
  • Diagnose hybrid sync issues with Azure AD Connect Health and the Synchronization Service
  • Publish on-premises web apps through Application Proxy and automate SaaS account provisioning
  • Build time-bound access packages covering groups, Teams, SharePoint sites, and apps
  • Monitor identity activity with audit logs

Readiness check

Confirm prerequisite knowledge before training begins

A short placement assessment on the CBT Nuggets assessments platform measures whether a learner already has the foundation this course assumes. IT leaders use it to put the right people in the right training — and any learner can take it right now to make sure they'll get full value from day one.

  • Questions generated from this course's own video transcripts — what gets measured is exactly what gets taught
  • Instant, per-learner results that show whether the prerequisite foundation is in place
  • Results roll up into team readiness reporting, so training hours go where they change outcomes
Runs on assessments.cbtnuggets.com — sign in with an Adept account so results roll up into team readiness reporting. Need one?
.

If gaps show up, start here

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)

Cloud adoption spreads security, identity, and compliance work across help desk staff, sysadmins, and compliance stakeholders who often lack a shared vocabulary. When terms like Zero Trust, least privilege, and the shared responsibility model mean di...

~22h

This course is included with every plan

Unlock this one course, or get one learner — or your whole team — access to all 291 courses, virtual labs, and practice exams.

Course Unlock

Just need this course?

$225one time

No subscription

One year of access to SC-300

  • Every skill in this course
  • Its practice exam
  • Ask IT Trainerbot about it — free

CBT Nuggets Individual

Includes IT Trainerbot Plus

$49per month

Billed annually

Every course, for one learner

See Individual pricing
For IT teams

CBT Nuggets Teams

IT Trainerbot for every seat

$59per seat / mo

Billed annually

From 1 learner seat · unlimited admin seats

Checking your access…

Frequently Asked Questions

Is the Microsoft Certified: Identity and Access Administrator Associate (SC-300) worth it?

Yes, if you need a way of proving your familiarity with securing an organization's digital assets, the Identity and Access Administrator Associate certification is worth it. It focuses on identity and access management within Azure, so if you work as an Azure administrator, or would like to, earning the cert proves to employers that you know how to deal with security challenges in cloud environments.

How much does the Identity and Access Administrator Associate (SC-300) exam cost?

The Microsoft Certified: Identity and Access Administrator Associate costs $165. It doesn't have any prerequisites and Exam SC-300: Microsoft Identity and Access Administrator is the only exam you have to pass in order to earn it. Microsoft offers free practice assessments but no free retakes, so preparing for the exam with a course will help make sure you don't have to pay the $165 more than once.

How difficult is the Microsoft Certified: Identity and Access Administrator Associate exam (SC-300)?

The SC-300: Identity and Access Administrator Associate exam has 48 questions, and most people who pass it report that it's not especially difficult. 40 of the questions are related to subject matter knowledge, and the remaining 8 cover a sample case study, which you must evaluate and answer subjective questions about. The most challenging aspect of SC-300 is its emphasis on answering questions according to Microsoft guidelines.

Does the Identity and Access Administrator Associate (SC-300) expire?

Yes, as of 2023, all of Microsoft's certifications are valid for only one year. The Microsoft Certified: Identity and Access Administrator Associate (SC-300) certification will be good for one year from the date you earn it. Renewing it is easy, though: Microsoft offers a free renewal certification exam which you can take as early as six months after earning your cert. The renewal exam also covers updates to the technology and job position.

How should I prepare for the Identity and Access Administrator exam (SC-300)?

The SC-300 was designed to measure your familiarity with accomplishing technical tasks related to securing digital assets, so the best way to prepare for it is with hands-on, practical experience managing Microsoft network environments. You'll need technical knowledge and first-hand experience with implementing and managing user identities, implementing authentication and access controls, handling workload identities, and managing identity governance to pass the SC-300.

Ready to upskill your team?

See how IT leaders fit this course into a team training plan, and what a plan costs for your team's size.