Microsoft Certified: Identity and Access Administrator Associate

The Microsoft identity and access administrator designs, implements, and operates an organization’s identity and access management systems by using Azure Active Directory (Azure AD). They manage tasks such as providing secure authentication and authorization access to enterprise applications. The administrator provides seamless experiences and self-service management capabilities for all users. Adaptive access and governance are core elements to the role. This role is also responsible for troubleshooting, monitoring, and reporting for the identity and access environment.

Skills measured

Implement an identity management solution
Implement an authentication and access management solution
Implement access management for apps
Plan and implement an identity governance strategy

Course Outline

Implement initial configuration of Azure Active Directory

configure and manage Azure AD directory roles
configure and manage custom domains
configure and manage device registration options
configure delegation by using administrative units
configure tenant-wide settings

Implement and manage external identities

manage external collaboration settings in Azure Active Directory
invite external users (individually or in bulk)
manage external user accounts in Azure Active Directory
configure identity providers (social and SAML/WS-fed)

Plan and implement Azure Multifactor Authentication (MFA)

plan Azure MFA deployment (excluding MFA Server)
implement and manage Azure MFA settings
manage MFA settings for users

Manage user authentication

administer authentication methods (FIDO2 / Passwordless)
implement an authentication solution based on Windows Hello for Business
configure and deploy self-service password reset
deploy and manage password protection
configure smart lockout thresholds
implement and manage tenant restrictions

Plan, implement, and monitor the integration of Enterprise Apps for SSO

implement and configure consent settings
discover apps by using MCAS or ADFS app report
design and implement access management for apps
design and implement app management roles
monitor and audit access / Sign-ins to Azure Active Directory integrated enterprise applications
integrate on-premises apps by using Azure AD application proxy
integrate custom SaaS apps for SSO
configure pre-integrated (gallery) SaaS apps
implement application user provisioning

Implement app registrations

plan your line of business application registration strategy
implement application registrations
configure application permissions
implement application authorization
plan and configure multi-tier application permissions

Plan and implement entitlement management

define catalogs
define access packages
plan, implement and manage entitlemen
implement and manage terms of use
manage the lifecycle of external users in Azure AD Identity Governance settings

Monitor and maintain Azure Active Directory

analyze and investigate sign-in logs to troubleshoot access issues
review and monitor Azure AD audit logs
enable and integrate Azure AD diagnostic logs with Log Analytics / Azure Sentinel
export sign-in and audit logs to a third-party SIEM
review Azure AD activity by using Log Analytics / Azure Sentinel, excluding KQL use
analyze Azure Active Directory workbooks / reporting
configure notifications

About The Exam

This exam measures your ability to accomplish the following technical tasks: implement an identity management solution; implement an authentication and access management solution; implement access management for apps; and plan and implement an identity governance strategy.