Microsoft Entra ID Course

Lesson 1 • Entra ID Licensing and Service Tiers

Explains the Free, P1, and P2 licence tiers and the features unlocked at each level. Helps students align feature selection with organisational requirements.

Lesson 2 • Navigating the Entra Admin Center

Orients students to the Entra admin portal interface, key navigation areas, and administrative dashboards. Builds hands-on familiarity needed for all lab exercises throughout the course.

Lesson 3 • Microsoft Entra ID Overview

Introduces Entra ID as Microsoft's cloud-based identity platform and its evolution from Azure Active Directory. Clarifies its scope, capabilities, and relationship to on-premises directories.

Lesson 1 • Dynamic and Assigned Group Membership

Teaches static membership assignment and dynamic membership rules based on user attributes. Enables automated group management that scales with organisational growth.

Lesson 2 • Group Types and Creation

Explains security groups, Microsoft 365 groups, and distribution groups and their use cases. Provides the foundation for role assignments and access control in later chapters.

Lesson 3 • Creating and Configuring User Accounts

Covers manual and bulk user creation, profile attributes, and account settings. Establishes the user object as the primary identity unit in Entra ID.

Lesson 4 • Managing User Account Lifecycle

Addresses account disabling, deletion, and restoration workflows. Connects lifecycle management to security hygiene and compliance requirements.

Lesson 1 • Multi-Factor Authentication Configuration

Covers enabling and enforcing MFA using per-user settings and security defaults. Establishes MFA as the primary control for reducing credential-based attacks.

Lesson 2 • Password Protection and Smart Lockout

Deploys Entra ID Password Protection to block weak and banned passwords. Complements MFA by hardening the password layer against brute-force attacks.

Lesson 3 • Passwordless Authentication

Teaches deployment of Windows Hello for Business, FIDO2 keys, and the Authenticator app for passwordless sign-in. Reduces password-related risk whilst improving user experience.

Lesson 4 • Authentication Methods Policy

Explains the unified Authentication Methods policy for managing available verification options. Connects method selection to organisational risk tolerance and user experience goals.

Lesson 1 • Advanced Conditional Access Scenarios

Covers token protection, authentication strength, and Continuous Access Evaluation. Extends basic policies to address sophisticated threat scenarios.

Lesson 2 • Building Your First Policies

Walks through creating MFA-required and compliant-device policies using the portal. Translates architecture knowledge into practical, deployable configurations.

Lesson 3 • Report-Only Mode and Policy Testing

Uses report-only mode and the What If tool to validate policies before enforcement. Prevents unintended lockouts and builds confidence in policy design.

Lesson 4 • Named Locations and Trusted Networks

Configures IP-based and country-based named locations for use in policy conditions. Enables location-aware access decisions that reflect organisational network boundaries.

Lesson 1 • Administrative Units for Scoped Delegation

Uses administrative units to restrict role scope to subsets of users, groups, or devices. Enables delegation models that match organisational structure without granting tenant-wide access.

Lesson 2 • Custom Role Definitions

Creates custom roles with specific permission sets for unique administrative scenarios. Provides granular control beyond what built-in roles offer.

Lesson 3 • Entra ID RBAC Fundamentals

Introduces the role model, role definitions, and the difference between Entra ID roles and Azure RBAC roles. Establishes the principle of least privilege as the design standard.

Lesson 4 • Role Assignment Auditing and Governance

Reviews audit logs, access reviews, and reporting for role assignments. Ensures ongoing compliance with least-privilege standards over time.

Lesson 1 • Enterprise App Assignment and Provisioning

Manages user and group assignments to enterprise apps and configures SCIM-based provisioning. Automates user lifecycle within connected SaaS applications.

Lesson 2 • App Registration Fundamentals

Explains the app registration object, service principals, and the relationship between them. Provides the conceptual model for all application integration scenarios.

Lesson 3 • OAuth 2.0 and OpenID Connect Integration

Configures apps to use OAuth 2.0 authorisation flows and OpenID Connect for authentication. Enables modern token-based authentication for custom and third-party applications.

Lesson 4 • SAML-Based Single Sign-On

Configures SAML 2.0 SSO for enterprise applications in the Entra ID app gallery and custom apps. Extends SSO capabilities to legacy and third-party SaaS applications.

Lesson 1 • Access Reviews

Creates and manages access reviews for group memberships, app assignments, and privileged roles. Enforces periodic recertification to maintain least-privilege access over time.

Lesson 2 • Entitlement Management

Configures access packages, catalogues, and policies to automate access request and approval workflows. Enables self-service access governance for internal and external users.

Lesson 3 • Privileged Identity Management

Deploys PIM to provide just-in-time privileged access with approval workflows and time limits. Reduces standing privileged access exposure across Entra ID and Azure roles.

Lesson 4 • Entra ID Protection Risk Detections

Explains user risk and sign-in risk detections, risk levels, and the underlying detection signals. Provides the foundation for automated risk-based policy responses.

Lesson 1 • Password Hash Sync and Pass-Through Auth

Compares password hash synchronisation, pass-through authentication, and federation sign-in methods. Enables informed selection of the authentication method that fits organisational requirements.

Lesson 2 • Microsoft Entra Connect Sync

Installs and configures Entra Connect to synchronise on-premises AD objects to Entra ID. Establishes the hybrid identity foundation for organisations with existing on-premises infrastructure.

Lesson 3 • Entra ID B2B Collaboration

Configures B2B guest access to share resources with external partner identities. Enables secure cross-organisational collaboration without managing external user credentials.

Lesson 4 • Active Directory Federation Services Integration

Configures AD FS as a federated identity provider with Entra ID for organisations requiring on-premises authentication control. Addresses migration paths from AD FS to cloud authentication.