Skip to content
CBT Nuggets
DemoBook a Demo

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

This Microsoft Identity and Access Administrator (SC-300) training prepares you to become a Microsoft identity and access admin. Expert-led training will teach you to implement and manage secure identity solutions using Microsoft Entra ID (Azure AD) and hybrid identities. You’ll set up and manage users, groups, devices, and custom roles. You’ll learn to configure passwordless and multifactor sign-in, apply conditional access policies, and use tools like PIM to support a zero-trust strategy. You’ll also manage app access with registrations, service principals, and entitlement controls. Bring on-prem and cloud together using Azure AD Connect and Active Directory Federation Services, and monitor and protect identities using Defender for Cloud Apps, Sentinel, Identity Protection and Identity Secure Score. With practice exams and real‑world scenarios, this course maps to the SC‑300 exam blueprint, giving you the skills and confidence to get certified and secure access to your organization’s cloud resources.

Updated September 2022

17Skills
126Videos
1Practice Exam
17hTotal

Who This Course Is For

This Microsoft Identity and Access Administrator (SC-300) training is considered professional-level Azure training for security pros. This Azure skills course is designed for security professionals with three to five years of experience with cyber and network security.

Skills Your Team Will Gain

  • Design and implement identity solutions with Microsoft Entra ID and hybrid Azure AD
  • Manage user, group and device identities across cloud and on‑premises environments
  • Deploy passwordless and multifactor authentication with conditional access and PIM
  • Control application access via app registrations, service principals and role assignments
  • Implement identity governance with access packages, entitlement management and periodic reviews
  • Monitor and troubleshoot identities using tools like Identity Protection, Sentinel, Log Analytics and Kusto queries

Course Curriculum

One skill is free to watch — no signup needed. The other 16 premium skills unlock for your whole team with a CBT Nuggets plan.

Free skill preview

Azure MFA and User Authentication

Bob SalmansDuration: 1h 49m28 videos

Watch this complete skill free — the same trainer, videos, and labs your team gets with a plan.

Watch free skill
  • Premium skill.Azure Active Directory Initial Configuration1h 6m · 18 videos
  • Premium skill.Azure AD User, Groups and Licenses55m · 14 videos
  • Premium skill.Azure AD Hybrid Identities56m · 14 videos
  • Premium skill.Azure AD External Identities51m · 16 videos
  • Azure MFA and User AuthenticationFree1h 49m · 28 videos
  • Premium skill.Conditional Access and Identity Protection1h 6m · 18 videos
  • Premium skill.Implement Access Management for Azure Resources48m · 16 videos
  • Premium skill.Deploying Enterprise Applications in Azure AD1h 18m · 22 videos
  • Premium skill.Application Registration in Azure AD48m · 14 videos
  • Premium skill.Azure Entitlement Management1h 20m · 20 videos
  • Premium skill.Azure Access Reviews51m · 14 videos
  • Premium skill.Azure Privileged Identity56m · 12 videos
  • Premium skill.Azure AD Management49m · 16 videos
  • Premium skill.Using Azure Monitor and Identity Secure Score59m · 14 videos
  • Premium skill.Manage and monitor application access using Defender for Cloud Apps52m · 14 videos
  • Premium skill.Entra Global Secure Access - Introduction47m · 15 videos
  • Premium skill.Entra Global Secure Access - Configuration51m · 19 videos
Want to browse the locked skills?
with no purchase required. Already have an account?

An account gets you the full catalog to browse, pre-assessments, quiz questions on free skills, and IT Trainerbot, with every answer citing its source video.

Certification

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

The Microsoft Certified: Identity and Access Administrator Associate validates the skills to design, implement, and manage identity and access management systems, including identity protection, access management, and identity governance. This certifi...

Exam SC-300Level AssociateDifficulty IntermediateCost 165 USD
Identity and access managementAzure Active DirectoryConditional AccessIdentity governanceAccess reviewsPrivileged Identity Management
Official certification page

Put this course to work for your team

Every plan includes this course plus the full library, virtual labs, and practice exams — or talk it through with sales.

For IT leaders

What IT leaders need to know before assigning this course

Organizations running Microsoft 365 and Azure need consistent identity controls across users, apps, resources, and external access — without slowing daily operations or increasing audit risk. IT Directors assign this SC-300 training to security professionals, identity admins, and Team Leads responsible for Azure AD/Entra identity management in small business or enterprise environments. The course is intermediate and best suited for IT Practitioners with roughly three to five years of cyber or network security experience.

Plan for about 17 hours per learner. For change management, this training fits best as role-specific enablement for admins who configure identity, authentication, governance, privileged access, and monitoring — not general awareness training for all employees. CBT Nuggets capabilities such as Playlists and Team Reporting can help Training Managers sequence the skills by role and track completion; Practice Exams, where included, support SC-300 certification readiness.

Team Impact

How this training helps your team succeed

This training helps IT teams standardize how identity and access are configured, governed, and monitored across Microsoft cloud environments. The course maps to real operational work: setting up Azure AD, managing users and licenses, supporting hybrid and external identities, enforcing MFA and Conditional Access, governing app access, and reviewing privileged permissions.

  • Reduce identity-related risk: Teams learn to apply MFA, Conditional Access, Identity Protection, access reviews, and Privileged Identity Management.
  • Improve onboarding and access changes: Admins practice managing users, groups, licenses, entitlement management, and Azure resource access.
  • Support hybrid and partner scenarios: IT Practitioners build knowledge around hybrid identities and external identities for environments that span internal and outside users.
  • Strengthen audit readiness: Teams learn to monitor identity posture with Azure Monitor, Identity Secure Score, and Defender for Cloud Apps.

After completion

Capabilities your team walks away with

Knowledge

  • Azure Active Directory/Entra ID initial configuration concepts and identity architecture basics
  • User, group, and license management in Azure AD
  • Hybrid identity and external identity models
  • MFA, user authentication, Conditional Access, and Identity Protection concepts
  • Enterprise application deployment, app registration, and application access governance
  • Entitlement management, access reviews, Privileged Identity Management, Identity Secure Score, Azure Monitor, and Defender for Cloud Apps monitoring concepts

Ability

  • Configure and manage Azure AD identity settings for Microsoft cloud environments
  • Administer users, groups, licenses, hybrid identities, and external identities
  • Implement stronger authentication and access policies with MFA and Conditional Access
  • Manage access to Azure resources, enterprise applications, and registered applications
  • Apply governance workflows through entitlement management, access reviews, and privileged identity controls
  • Monitor identity security posture and application access using Microsoft identity and security tools

Readiness check

Confirm prerequisite knowledge before training begins

A short placement assessment on the CBT Nuggets assessments platform measures whether a learner already has the foundation this course assumes. IT Directors use it to put the right people in the right training — and any learner can take it right now to make sure they'll get full value from day one.

  • Questions generated from this course's own video transcripts — what gets measured is exactly what gets taught
  • Instant, per-learner results that show whether the prerequisite foundation is in place
  • Results roll up into team readiness reporting, so training hours go where they change outcomes
Runs on assessments.cbtnuggets.com — sign in with an Adept account so results roll up into team readiness reporting. Need one?
.

If gaps show up, start here

Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)

This Microsoft SC-900 training prepares you to earn your Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) certification. You'll learn the fundamentals of security, compliance, and identity (SCI) within the Microsoft servi...

~22h

This course is included with every subscription

Unlock this one course, or get one learner — or your whole team — access to all 287 courses, virtual labs, and practice exams.

Course Unlock

Just need this course?

$225one time

No subscription

One year of access to SC-300

  • Every skill in this course
  • Its virtual labs and practice exam
  • Ask IT Trainerbot about it — free

CBT Nuggets Individual

IT Trainerbot Pro

$49per month

Billed annually

Every course, for one learner

See Individual pricing
For IT teams

CBT Nuggets Teams

IT Trainerbot for Teams

$59per seat / mo

Billed annually

From 1 learner seat · unlimited admin seats

Checking your access

Need tenant hosting, reseller terms, or payment plans on a larger agreement? Book a Demo to discuss an Enterprise contract.

See plans and pricing for your team

Trusted by 23,000+ organizations

Frequently Asked Questions

Is the Microsoft Certified: Identity and Access Administrator Associate (SC-300) worth it?

Yes, if you need a way of proving your familiarity with securing an organization's digital assets, the Identity and Access Administrator Associate certification is worth it. It focuses on identity and access management within Azure, so if you work as an Azure administrator, or would like to, earning the cert proves to employers that you know how to deal with security challenges in cloud environments.

How much does the Identity and Access Administrator Associate (SC-300) exam cost?

The Microsoft Certified: Identity and Access Administrator Associate costs $165. It doesn't have any prerequisites and Exam SC-300: Microsoft Identity and Access Administrator is the only exam you have to pass in order to earn it. Microsoft offers free practice assessments but no free retakes, so preparing for the exam with a course will help make sure you don't have to pay the $165 more than once.

How difficult is the Microsoft Certified: Identity and Access Administrator Associate exam (SC-300)?

The SC-300: Identity and Access Administrator Associate exam has 48 questions, and most people who pass it report that it's not especially difficult. 40 of the questions are related to subject matter knowledge, and the remaining 8 cover a sample case study, which you must evaluate and answer subjective questions about. The most challenging aspect of SC-300 is its emphasis on answering questions according to Microsoft guidelines.

Does the Identity and Access Administrator Associate (SC-300) expire?

Yes, as of 2023, all of Microsoft's certifications are valid for only one year. The Microsoft Certified: Identity and Access Administrator Associate (SC-300) certification will be good for one year from the date you earn it. Renewing it is easy, though: Microsoft offers a free renewal certification exam which you can take as early as six months after earning your cert. The renewal exam also covers updates to the technology and job position.

How should I prepare for the Identity and Access Administrator exam (SC-300)?

The SC-300 was designed to measure your familiarity with accomplishing technical tasks related to securing digital assets, so the best way to prepare for it is with hands-on, practical experience managing Microsoft network environments. You'll need technical knowledge and first-hand experience with implementing and managing user identities, implementing authentication and access controls, handling workload identities, and managing identity governance to pass the SC-300.

Ready to upskill your team?

Talk to our sales team to find the right plan for your organization.