Microsoft Identity and Access Administrator (SC-300)
Exam SC-300 Microsoft Intermediate
Identity is the new perimeter. SC-300 covers Entra ID, access management, governance and identity protection in depth.
1 course · 8 sections · 260 lectures · 25 labs · ≈ 16 h of hands-on labs
All 25 SC-300 hands-on labs on one page →
Free to start: the free lessons and guides for this roadmap →
Exam domains
- Implement and manage user identities — 20–25%
- Implement authentication and access management — 25–30%
- Plan and implement workload identities — 20–25%
- Plan and automate identity governance — 20–25%
Microsoft publishes a range for each domain. Microsoft updated the outline on 28 October 2026 with minor changes inside authentication, Global Secure Access and privileged access; the four domains and their weights stay the same. The SC-300 course follows an earlier outline: its module headings show the old weights, it does not cover Global Secure Access or Defender for Cloud Apps, and its three Azure Sentinel chapters are SC-200 material you can skip.
Try a free password security lab: Cracked in a second (~5 min) → A scripted simulation in your browser. No account needed.
The path
Start here →
Step 1 — Learn identity administration
The full SC-300 syllabus.
1 course · 8 sections · 260 lectures
Learn
- CourseSC-300 : Microsoft Identity and Access Administrator (opens in a new tab)opens on courses.stationx.net 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
8 sections · 260 lectures
- Introduction 2
- Module 1 : Implement and Identity Management Solution (25-30%) 62
- Module 2 - Implement an Authentication and Access Management Solution (25-30%) 61
- Module 3 - Plan and Design Integration of Enterprise Apps for SSO (25-30%) 35
- Module 4 - Plan and Implement Identity Governance Strategy (10-15 %) 42
- Bonus - Azure Sentinel - Chapter 1 30
- Bonus - Azure Sentinel - Chapter 2 8
- Bonus - Azure Sentinel Chapter 3 20
Step 2 — User identities, authentication and governance
Run users, MFA, Conditional Access, PIM and access reviews in Entra ID, and sync identities from AD DS.
19 labs
Learn
- CourseCovered in SC-300 : Microsoft Identity and Access Administrator (opens in a new tab)opens on courses.stationx.net — identity management, authentication and governance modules 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
8 sections · 260 lectures
- Introduction 2
- Module 1 : Implement and Identity Management Solution (25-30%) 62
- Module 2 - Implement an Authentication and Access Management Solution (25-30%) 61
- Module 3 - Plan and Design Integration of Enterprise Apps for SSO (25-30%) 35
- Module 4 - Plan and Implement Identity Governance Strategy (10-15 %) 42
- Bonus - Azure Sentinel - Chapter 1 30
- Bonus - Azure Sentinel - Chapter 2 8
- Bonus - Azure Sentinel Chapter 3 20
Practise
- Infra LabsImplement an Identity Management Solution — 18 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Manage Users, Groups, and Administrative Units in Microsoft Entra IDLevel: GuidedDuration: 30 min
- Can You Manage Users, Groups, and Administrative Units in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Configure Roles and Tenant Wide Settings in Microsoft Entra IDLevel: GuidedDuration: 30 min
- Can You Configure Roles and Tenant-Wide Settings in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Can You Configure Device Registrations and Manage External Users in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Implement and Manage Hybrid Identities and Synchronization in Microsoft Entra IDLevel: GuidedDuration: 30 min
- Can You Implement and Manage Hybrid Identities and Synchronization in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Configure Multi-factor Authentication in Microsoft Entra IDLevel: GuidedDuration: 30 min
- Configure Self-Service Password Reset in Microsoft Entra IDLevel: GuidedDuration: 30 min
- Can You Configure Multifactor Authentication and Self-service in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Can You Implement Conditional Access Policies in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Can You Manage Identity Protection in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Can You Implement Entitlement Management by Using Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Can You Configure Access Reviews in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Configure Access Reviews in Microsoft Entra IDLevel: GuidedDuration: 30 min
- Manage Privileged Access in Microsoft Entra IDLevel: GuidedDuration: 30 min
- Can You Manage Privileged Access in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Can You Monitor Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Infra LabsWindows Server Hybrid Administration — 1 lab 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Implement Integration Between Active Directory Domain Services and Microsoft Entra IDLevel: GuidedDuration: 30 min
Step 3 — Workload identities and app access
Enterprise apps, app registrations and managed identities, and app access through Defender for Cloud Apps.
6 labs
Learn
- CourseCovered in SC-300 : Microsoft Identity and Access Administrator (opens in a new tab)opens on courses.stationx.net — enterprise apps and SSO module 🔒 StationX Membership — $299 / year ($24.92/mo billed annually)
8 sections · 260 lectures
- Introduction 2
- Module 1 : Implement and Identity Management Solution (25-30%) 62
- Module 2 - Implement an Authentication and Access Management Solution (25-30%) 61
- Module 3 - Plan and Design Integration of Enterprise Apps for SSO (25-30%) 35
- Module 4 - Plan and Implement Identity Governance Strategy (10-15 %) 42
- Bonus - Azure Sentinel - Chapter 1 30
- Bonus - Azure Sentinel - Chapter 2 8
- Bonus - Azure Sentinel Chapter 3 20
Practise
- Infra LabsImplement an Identity Management Solution — 5 labs 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Create and Configure Enterprise Applications in Microsoft Entra IDLevel: GuidedDuration: 30 min
- Can You Create and Configure Enterprise Applications in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Configure Application Registrations in Microsoft Entra IDLevel: GuidedDuration: 30 min
- Can You Configure Application Registrations in Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Can You Implement Access and Single Sign-On for Applications by Using Microsoft Entra ID?Level: AdvancedDuration: 45 min
- Infra LabsMicrosoft Defender — 1 lab 🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab in any 12 months
- Microsoft Defender for Cloud AppsLevel: GuidedDuration: 30 min
