Identity & Access Management
Identity is the new perimeter. Master directory services, federation, MFA, and PAM to build an IAM program that enables the business without compromising security.
Who this path is for
This path is for system administrators, help desk leads and security engineers who manage users, groups and access day to day and want to specialize. You should know the basics of Active Directory or Entra ID. The target role is an IAM engineer who designs authentication, federation and privileged access for the whole organization.
What you'll be able to do
- Explain how Active Directory domains, trusts and Group Policy fit together, and where attackers usually target them.
- Configure Entra ID federation and single sign-on with SAML and OpenID Connect applications.
- Roll out MFA and passwordless options such as FIDO2 security keys and Windows Hello for Business.
- Design privileged access with just-in-time elevation, approval workflows and break glass accounts.
- Run access reviews and joiner, mover and leaver processes that stop permission creep.
What you'll cover
Directory Services & Active Directory
Understand AD domains, forests, trusts, Group Policy, and common AD attack paths.
Entra ID & Identity Federation
SAML, OAuth 2.0, OIDC, and how to federate on-premises AD with cloud identity.
MFA & Passwordless Authentication
Deploy MFA at scale, migrate to passwordless, and understand phishing-resistant authentication.
Privileged Access Management (PAM)
Vault privileged credentials, implement session recording, and enforce just-in-time access.
Knowledge Check
Related certifications
Microsoft Identity and Access Administrator
The most direct match for this path in Microsoft environments, covering Entra ID, authentication, access management and identity governance.
Free SC-300 course →Microsoft Cybersecurity Architect Expert
A later step if you want to move from running identity to designing the wider security architecture around it.
Free SC-100 course →Okta Certified Professional
Worth considering if your organization uses Okta as its identity provider.
Frequently asked questions
How long does the Identity & Access Management path take?
About 11 hours for the four topic areas and the knowledge check. Testing policies in a free Entra ID developer tenant makes the material stick.
What should I know before starting?
Basic Active Directory or Entra ID administration, such as creating users and groups. The PowerShell Zero to Hero course helps if you want to automate identity tasks.
What jobs does this path lead to?
It prepares you for roles such as IAM engineer, identity administrator, PAM engineer and identity architect.
Path Summary
- Level
- Intermediate
- Estimated time
- 11 hours
- Topics
- 4
- Resources
- 12
- Quiz questions
- 10
- Passing score
- 70% (7/10)