- Identity and access administrator toolkit in the Microsoft Entra admin center.
- Map of SC-300 skills measured as of 27 April 2026.
- How this course differs from SC-900 and where an optional primer fits.
- Exam logistics: passing score 700/1000, Pearson VUE, Microsoft Learn renewal.
Microsoft Identity and Access Administrator (SC-300)
Microsoft SC-300 Identity and Access Administrator Certification Training Course
Design, implement, and operate identity and access with Microsoft Entra. That’s the Identity and Access Administrator Associate (SC-300) work.
Course focus: Entra tenants and identities, hybrid identity, authentication and Conditional Access, Entra ID Protection, Global Secure Access, workload identities and enterprise apps, and identity governance with entitlement management, access reviews, and PIM.
Course Overview
Operate Microsoft Entra identity and access, not SC-900 vocabulary alone.
Accumentum’s Microsoft SC-300 Identity and Access Administrator Certification Training Course prepares identity and access administrators to configure and manage identities throughout their lifecycles for users, devices, Azure resources, and applications using Microsoft Entra.
This course is not SC-900. SC-900 is an optional primer only. Start here when you are ready to implement Zero Trust identity and access solutions with Entra.
Course Objectives
What you will be able to implement and govern.
01
User and hybrid identities
Entra tenants, users, groups, external identities, and hybrid identity with Connect Sync and Cloud Sync (20 to 25%).
02
Authentication and access
MFA, passwordless, Conditional Access, Entra ID Protection, and Global Secure Access (25 to 30%).
03
Workload identities and apps
Managed identities, enterprise apps, app registrations, and Defender for Cloud Apps monitoring (20 to 25%).
04
Identity governance
Entitlement management, access reviews, Privileged Identity Management, and identity monitoring (20 to 25%).
Who Should Attend
- Identity and access administrators who design, implement, and operate Microsoft Entra.
- Azure and Microsoft 365 administrators expanding into identity governance and Conditional Access.
- People with SC-900 or equivalent familiarity who are ready for identity administrator work.
- Learners still on security vocabulary should postpone SC-300 and use SC-900 as an optional primer only.
Prerequisites
- Familiarity with Azure, Microsoft 365 workloads, and Active Directory Domain Services is recommended.
- Familiarity with PowerShell and KQL supports readiness, SC-900 is not this course.
- This training is for identity and access administrators, not for SC-900 beginners.
- Hands-on practice with Microsoft Entra ID P2 features supports SC-300 exam readiness.
Pathway Map
Ten modules mapped to Microsoft SC-300 skills as of 27 April 2026.
Skills measured: implement and manage user identities 20 to 25%, implement authentication and access management 25 to 30%, plan and implement workload identities 20 to 25%, and plan and automate identity governance 20 to 25%.
Course Content
- Configure built-in and custom Entra roles, administrative units, domains, branding, and tenant settings.
- Create and manage users, groups, custom security attributes, devices, and licenses.
- Bulk operations with the admin center and PowerShell.
- User identities skill area 20 to 25% begins here.
- External collaboration, invitations, cross-tenant access and synchronization, and external IdPs (SAML/WS-Fed).
- Microsoft Entra Connect Sync and Cloud Sync.
- Password hash sync, pass-through authentication, seamless SSO, and Connect Health.
- Migrate from AD FS to modern authentication mechanisms.
- Authentication methods: CBA, Temporary Access Pass, OAuth tokens, Authenticator, and passkeys (FIDO2).
- Tenant-wide MFA, SSPR, Windows Hello for Business, password protection, and Entra Kerberos.
- Disable accounts and revoke sessions.
- Authentication and access management skill area 25 to 30%.
- Plan, implement, test, and troubleshoot Conditional Access policies.
- Session management, device-enforced restrictions, continuous access evaluation, and authentication context.
- Protected actions and policies from templates.
- Conditional Access as the core of Entra access management.
- User risk and sign-in risk with Entra ID Protection or Conditional Access.
- MFA registration campaigns. Remediate risky users, sign-ins, and workload identities.
- Deploy Global Secure Access clients.
- Private Access, Internet Access, and Internet Access for Microsoft 365.
- Select identities for apps and Azure workloads: managed identities, service principals, and related options.
- Create and assign managed identities. Use them to access Azure resources.
- Workload identities skill area 20 to 25%.
- Identity patterns for applications and Azure resources.
- Enterprise application settings, Application Proxy, SaaS integration, app roles, and consent.
- Plan and create app registrations. Configure authentication, API permissions, and app roles.
- Manage and monitor app access with Microsoft Defender for Cloud Apps.
- Cloud discovery, Conditional Access app control, and OAuth app policies.
- Catalogs, access packages, access requests, terms of use, and connected organizations.
- Plan, create, configure, and monitor access reviews.
- Identity governance skill area 20 to 25%.
- Lifecycle of external users in entitlement management.
- PIM for Entra roles, Azure resources, and groups. Request/approval, audit, and break-glass accounts.
- Sign-in, audit, and provisioning logs. Diagnostic settings and Log Analytics with KQL.
- Workbooks, reporting, and Identity Secure Score.
- Monitor and improve the identity security posture.
Course Features
Designed for SC-300 identity and access work.
Skills-measured map
Ten modules aligned to Microsoft SC-300 skills measured as of 27 April 2026.
Administrator scope
Entra identities, Conditional Access, workload identities, and governance, not SC-900 fundamentals alone.
Exam logistics
Public facts only: passing score 700/1000, Pearson VUE, renewal on Microsoft Learn. No unofficial question count.
Optional primer
SC-900 remains optional. This course is for identity administrators who operate Microsoft Entra.
Certification Exam
Prepare for the official Microsoft SC-300 exam.
SC-300 Exam Readiness
Accumentum SC-300 training prepares learners to implement Microsoft Entra identity and access for the Identity and Access Administrator Associate exam.
The Microsoft Certified: Identity and Access Administrator Associate exam is SC-300. Public facts: passing score 700/1000. Delivered through Pearson VUE. Certification renewal is on Microsoft Learn. This page does not state an unofficial question count.
Skills measured as of 27 April 2026: implement and manage user identities (20 to 25%). Implement authentication and access management (25 to 30%). Plan and implement workload identities (20 to 25%). Plan and automate identity governance (20 to 25%).
Skills Measured
Every SC-300 skill Microsoft publishes.
Microsoft lists the skills measured for Exam SC-300 as of October 28, 2026. Here are all 4 domains, 16 skill groups and 98 tasks in Microsoft's own wording. Our course maps a lesson or lab to each one.
Configure and manage a Microsoft Entra tenant
Part of Implement and manage user identities (20 to 25%)
- Configure and manage built-in and custom Microsoft Entra roles
- Recommend when to use administrative units
- Configure and manage administrative units
- Evaluate effective permissions for Microsoft Entra roles
- Configure and manage domains in Microsoft Entra ID and Microsoft 365
- Configure Company branding settings
- Configure tenant properties, user settings, group settings, and device settings
Create, configure, and manage Microsoft Entra identities
Part of Implement and manage user identities (20 to 25%)
- Create, configure, and manage users
- Create, configure, and manage groups
- Manage custom security attributes
- Automate bulk operations by using the Microsoft Entra admin center and PowerShell
- Manage device join and device registration in Microsoft Entra ID
- Assign, modify, and report on licenses
Implement and manage identities for external users and tenants
Part of Implement and manage user identities (20 to 25%)
- Manage External collaboration settings in Microsoft Entra ID
- Invite external users, individually or in bulk
- Manage external user accounts in Microsoft Entra ID
- Implement Cross-tenant access settings
- Implement and manage cross-tenant synchronization
- Configure external identity providers, including protocols such as SAML and WS-Fed
Implement and manage hybrid identity
Part of Implement and manage user identities (20 to 25%)
- Implement and manage Microsoft Entra Connect Sync
- Implement and manage Microsoft Entra Cloud Sync
- Implement and manage password hash synchronization
- Implement and manage pass-through authentication
- Implement and manage seamless single sign-on (SSO)
- Migrate from AD FS to other authentication and authorization mechanisms
- Implement and manage Microsoft Entra Connect Health
Plan, implement, and manage Microsoft Entra user authentication
Part of Implement authentication and access management (20 to 25%)
- Plan for authentication
- Implement and manage authentication methods, including certificate-based authentication, Temporary Access Pass, Microsoft Authenticator, and passkeys (FIDO2)
- Implement and manage tenant-wide multifactor authentication (MFA) settings
- Configure and deploy self-service password reset (SSPR)
- Implement and manage Windows Hello for Business
- Disable accounts and revoke user sessions
- Implement and manage Microsoft Entra password protection
- Enable Microsoft Entra Kerberos authentication for hybrid identities
Plan, implement, and manage Microsoft Entra Conditional Access
Part of Implement authentication and access management (20 to 25%)
- Plan Conditional Access policies
- Implement Conditional Access policy assignments
- Implement Conditional Access policy controls
- Test and troubleshoot Conditional Access policies
- Implement session management
- Implement device-enforced restrictions
- Implement continuous access evaluation
- Configure authentication context
- Implement protected actions
- Create a Conditional Access policy from a template
Manage risk by using Microsoft Entra ID Protection
Part of Implement authentication and access management (20 to 25%)
- Implement and manage user risk by using Microsoft Entra ID Protection or Conditional Access policies
- Implement and manage sign-in risk by using Microsoft Entra ID Protection or Conditional Access policies
- Implement and manage multifactor authentication registration by using authentication methods and registration campaigns
- Monitor, investigate and remediate risky users and risky sign-ins
- Monitor, investigate, and remediate risky workload identities
Implement Global Secure Access
Part of Implement authentication and access management (20 to 25%)
- Deploy Global Secure Access clients
- Deploy and manage Microsoft Entra Private Access
- Deploy and manage Microsoft Entra Internet Access
- Deploy and manage the Microsoft traffic profile for Microsoft 365
Plan and implement identities for applications and Azure workloads
Part of Plan and implement workload identities (20 to 25%)
- Select appropriate identities for applications and Azure workloads, including managed identities, service principals, user accounts, and managed service accounts
- Create managed identities
- Assign a managed identity to an Azure resource
- Use a managed identity assigned to an Azure resource to access other Azure resources
Plan, implement, and monitor the integration of enterprise applications
Part of Plan and implement workload identities (20 to 25%)
- Plan and implement settings for enterprise applications, including application-level and tenant-level settings
- Assign appropriate Microsoft Entra roles to users to manage enterprise applications
- Design and implement integration for on-premises apps by using Microsoft Entra Application Proxy
- Design and implement integration for software as a service (SaaS) apps
- Assign, classify, and manage users, groups, and app roles for enterprise applications
- Configure and manage user and admin consent
- Create and manage application collections
Plan and implement app registrations
Part of Plan and implement workload identities (20 to 25%)
- Plan for app registrations
- Create app registrations
- Configure app authentication
- Configure API permissions
- Create app roles
Manage and monitor app access by using Microsoft Defender for Cloud Apps
Part of Plan and implement workload identities (20 to 25%)
- Configure and analyze cloud discovery results by using Defender for Cloud Apps
- Configure connected apps
- Implement application-enforced restrictions
- Configure Conditional Access app control
- Create access and session policies in Defender for Cloud Apps
- Implement and manage policies for OAuth apps
- Manage the Cloud app catalog
Plan and implement entitlement management in Microsoft Entra
Part of Plan and automate identity governance (20 to 25%)
- Plan entitlements
- Create and configure catalogs
- Create and configure access packages
- Manage access requests
- Implement and manage terms of use (ToU)
- Manage the lifecycle of external users
- Configure and manage connected organizations
Plan, implement, and manage access reviews in Microsoft Entra
Part of Plan and automate identity governance (20 to 25%)
- Plan for access reviews
- Create and configure access reviews
- Monitor access review activity
- Manually respond to access review activity
Plan and implement privileged access
Part of Plan and automate identity governance (20 to 25%)
- Plan and manage Microsoft Entra roles in Microsoft Entra Privileged Identity Management (PIM), including settings and assignments
- Plan and manage Azure resources in PIM, including settings and assignments
- Plan and configure PIM for Groups
- Manage the PIM request and approval process
- Analyze PIM audit history and reports
- Create and manage emergency access accounts
Monitor identity activity by using logs, workbooks, and reports
Part of Plan and automate identity governance (20 to 25%)
- Review and analyze sign-in, audit, and provisioning logs by using the Microsoft Entra admin center
- Configure diagnostic settings, including configuring destinations such as Log Analytics workspaces, storage accounts, and Azure Event Hubs
- Monitor Microsoft Entra ID by using KQL queries in Log Analytics
- Analyze Microsoft Entra ID by using workbooks and reporting
- Monitor and improve the security posture by using Identity Secure Score
Study Plan
A practical path to SC-300.
We start with users and identities. You set up a tenant, manage users and groups, configure hybrid identity and handle external collaboration, because the rest of the exam builds on that foundation.
Authentication and access management is the largest domain at 25 to 30 percent. We build Conditional Access policies, set up multifactor and passwordless methods, and work through Identity Protection.
Workload identities come next. You register apps, configure enterprise apps and single sign on, and manage managed identities and service principals.
We finish with identity governance, including entitlement management, access reviews and Privileged Identity Management. The final week is review and the exam sandbox.
Exam Policies
Scoring, renewal and test day for SC-300.
SC-300 leads to Microsoft Certified: Identity and Access Administrator Associate. Microsoft requires a score of 700 or greater to pass.
Microsoft notes that the bullets under each skill show how a skill is assessed, and related topics may also be covered. Most questions cover features that are generally available, but the exam can include Preview features if they are commonly used.
Before test day you can try the exam sandbox to see the exam interface. If you use assistive devices or need extra time, Microsoft lets you request an accommodation. If the exam is not offered in your preferred language, you can request an extra 30 minutes.
Microsoft associate certifications expire annually. You renew by passing a free online assessment on Microsoft Learn, and we show you how to keep SC-300 current.
Career Outlook
Where SC-300 can take you.
SC-300 fits the people who run Microsoft Entra day to day. Titles include identity and access administrator, IAM engineer, Entra ID administrator, security administrator and Microsoft 365 administrator. The work spans users, groups and external identities, authentication and Conditional Access, workload identities and app registrations, and identity governance.
Per the U.S. Bureau of Labor Statistics, network and computer systems administrators earned a median annual wage of $99,130 in May 2025. A median is the midpoint, so half earned more and half earned less, and your own pay will depend on location, experience and employer. Source: BLS Occupational Outlook Handbook.
Funding and PathPay
Ways to pay for SC-300 training.
Accumentum is an Army CA and Air Force COOL Approved Vendor. If you're serving, start with your education center and read our Army CA and Air Force COOL pages for the steps. We'll help you line up the course with your request.
Paying on your own? SC-300 prep is eligible for PathPay, our monthly payment plan. Terms of 3, 4 and 6 months carry no added fee. 9, 12 and 18 month terms add 5%, 10% and 15%. Course access opens when your first payment clears.
Our funding page has every other option, and you can always talk with us or email info@accumentum.net before you enroll.
Frequently Asked Questions
SC-300 Identity and Access Administrator training with Accumentum: scope, audience, skills measured, and public exam facts.
No. This is SC-300 Identity and Access Administrator Associate training. SC-900 is not this course. SC-900 is an optional primer only.
Identity and access administrators. Azure and Microsoft 365 admins expanding into Entra governance. And people with SC-900 or equivalent. Postpone if you are still on security vocabulary.
Manage Entra tenants and hybrid identity. Implement MFA, Conditional Access, ID Protection, and Global Secure Access. Manage workload identities and enterprise apps. And operate entitlement management, access reviews, and PIM.
Ten modules: toolkit, Entra tenant and identities, external and hybrid identity, authentication, Conditional Access, ID Protection and Global Secure Access, workload identities, enterprise apps, entitlement management and access reviews, and PIM and monitoring.
As of 27 April 2026: user identities 20 to 25%, authentication and access 25 to 30%, workload identities 20 to 25%, identity governance 20 to 25%.
Exam SC-300. Passing score 700/1000. Pearson VUE. Renewal on Microsoft Learn.
No. This page uses public exam facts only and does not state an unofficial question count.
Use Accumentum registration for SC-300 training dates and enrollment support.
Microsoft requires a score of 700 or greater to pass.
Microsoft lists these domains:
- Implement and manage user identities, 20 to 25%
- Implement authentication and access management, 20 to 25%
- Plan and implement workload identities, 20 to 25%
- Plan and automate identity governance, 20 to 25%
Implement and manage user identities is the largest at 20 to 25%. We give it the most lab time.
Microsoft lists 98 tasks across 16 skill groups as of October 28, 2026. Our course covers all of them.
Microsoft associate certifications expire annually. You renew by passing a free online assessment on Microsoft Learn, and we show you how to keep SC-300 current.
Yes. Microsoft offers an exam sandbox that shows you the exam interface and question types.
Accumentum is an Army CA and Air Force COOL Approved Vendor. Start with your education center, and we'll help you with the rest.
Microsoft says most questions cover generally available features, but Preview features can appear if they are commonly used.
Yes. SC-300 prep is eligible for PathPay. Terms of 3, 4 and 6 months add no fee, and longer terms add 5% to 15%.
Enrollment
Enroll in Microsoft SC-300 Identity and Access Administrator Certification Training with Accumentum.
Enroll in Accumentum’s Microsoft SC-300 Identity and Access Administrator Certification Training Course to prepare for the Identity and Access Administrator Associate exam. For course dates and enrollment support, visit Accumentum’s registration page linked below.
Prepare for SC-300 identity and access work.
Implement Microsoft Entra identities, access, and governance. Not SC-900. Optional primer only.