Home
WSQ - Microsoft Identity and Access Administrator (SC-300)

WSQ - Microsoft Identity and Access Administrator (SC-300)

The Microsoft Identity and Access Administrator (SC-300) course equips participants with the expertise to implement and manage security, compliance, and identity solutions across Microsoft-based environments. This course covers a broad range of topics including the foundational identity concepts in Microsoft Entra ID, hybrid identity solutions, and multifactor authentication. Participants will learn to configure and manage Microsoft Entra roles, handle external identities, and deploy Conditional Access policies effectively.

The curriculum delves into advanced identity protection with Microsoft Entra Identity Protection, and integration of enterprise apps for Single Sign-On (SSO). By understanding the strategic frameworks and data protection policies, learners will be prepared to enhance their organization's security measures against emerging risks and threats. The course also addresses the management of privileged access and the implementation of entitlement management, ensuring comprehensive coverage of Microsoft’s identity and access capabilities.

Learning Outcomes

By end of the course, learners should be able to:

LO1: Establish and direct the integration of strategic security framework with Microsoft Entra ID.
LO2: Determine and define data protection policies with Microsoft Entra ID in accordance to industry standard.
LO3: Allocate resources effectively to enhance Microsoft security measures.
LO4: Review and anticipate Microsoft security controls to prepare the organization for emerging risks, threats, and vulnerabilities.

Course Brochure

Download WSQ - Microsoft Identity and Access Administrator (SC-300) Brochure

Skills Framework

This course follows the guideline of Security Strategy ICT-SNA-6021-1.1 under ICT Skills Framework

Certification

Certificate of Completion from Tertiary Infotech - Upon meeting at least 75% attendance and passing the assessment(s), participants will receive a Certificate of Completion from Tertiary Infotech.
OpenCerts from SkillsFuture Singapore - After passing the assessment(s) and achieving at least 75% attendance, participants will receive a OpenCert (aka Statement of Achievement) from SkillsFuture Singapore, certifying that they have achieved the Competency Standard(s) in the above Skills Framework.
External Certification - The participant will be able to attempt the Microsoft Identity and Access Administrator (SC300) exam after attending this course. Upon passing the exam, you will receive the Microsoft Identity and Access Administrator (SC300) accreditation.

Microsoft Learning Partner

We are Authorised Microsoft Learning Partner (Org ID: 5238476). To get the official Microsoft certification, please register your certification exam at Pearson Vue Test Center.

Certification Exam at Pearson Vue

We are Authorised Pearson Vue Testing Center. Once you have prepared for the exam, you can register for the certification here. The course fee does not include the certification exam fee.

You can purchase the exam voucher (one of the lowest prices in Singapore) at Microsoft Role-Based Certification Exam Voucher.

WSQ Funding

WSQ funding is only applicable to Singaporeans and PR. Subject to eligibility, the funding support is subjected to funding caps.

Effective for courses starting from 1 Jan 2024
Full Fee	GST	Nett Fee after Funding (Incl. GST)
		Baseline	MCES / SME
$2,000	$180.00	$1,180.00	$780.00

Baseline: Singaporean/PR age 21 and above
MCES(Mid-Career Enhanced Subsidy): S'porean age 40 & above

Upon registration, we will advise further on how to tap on the WSQ Training Subsidy.

You can pay the nett fee (after the WSQ training subsidy) by the following :

SkillsFuture Enterprise Credit (SFEC)

Eligible Singapore-registered companies can tap on $10000 SFEC to cover out-of-pocket expenses.Click here to submit SkillsFuture Enterprise Credit

SkillsFuture Credit (SFC)

Eligible Singapore Citizens can use their SFC to offset course fee payable after funding but the $4,000 Additional SFC (Mid-Career Support) cannot be used. Click here for SkillsFuture Credit submission

UTAP

Eligible NTUC members can apply for 50% of the unfunded fee from UTAP, capped up to $250/year and for members aged 40 and above, capped up to $500/year. Click here to submit UTAP

PSEA

Eligible Singapore Citizens can use their PSEA funds to offset course fee payable after funding.

To check for Post-Secondary Education Account (PSEA) eligibility for this course, Visit SkillsFuture (course code: TGS-2024047021)

Scroll down to “Keyword Tags” to verify for PSEA eligibility.
If there is “PSEA” under keyword tags, the course is eligible for PSEA.

Course Code: TGS-2024047021

Post-Course Support

We provide free consultation related to the subject matter after the course.
Please email your queries to enquiry@tertiaryinfotech.com and we will forward your queries to the subject matter experts.

Course Cancellation/Reschedule Policy

You can register your interest without upfront payment. There is no penalty for withdrawal of the course before the class commerce.
We reserve the right to cancel or re-schedule the course due to unforeseen circumstances. If the course is cancelled, we will refund 100% for any paid amount.
Note the venue of the training is subject to changes due to availability of the classroom

Course Details

Topic 1: Explore identity in Microsoft Entra ID

Explain the identity landscape
Explore zero trust with identity
Discuss identity as a control plane
Explore why we have identity
Define identity administration
Contrast decentralized identity with central identity systems
Discuss identity management solutions
Explain Microsoft Entra Business to Business
Compare Microsoft identity providers
Define identity licensing
Explore authentication
Discuss authorization
Explain auditing in identity

Topic 2: Implement initial configuration of Microsoft Entra ID

Configure company brand
Configure and manage Microsoft Entra roles
Exercise manage users roles
Configure delegation by using administrative units
Analyze Microsoft Entra role permissions
Configure and manage custom domains
Configure tenant-wide setting

Topic 3: Create, configure, and manage identities

Create, configure, and manage users
Create, configure, and manage groups
Configure and manage device registration
Manage licenses
Create custom security attributes
Explore automatic user creation

Topic 4: Implement and manage external identities

Describe guest access and Business to Business accounts
Manage external collaboration
Invite external users - individually and in bulk
Manage external user accounts in Microsoft Entra ID
Manage external users in Microsoft 365 workloads
Implement and manage Microsoft Entra Verified ID
Configure identity providers
Implement cross-tenant access controls

Topic 5: Implement and manage hybrid identity

Plan, design, and implement Microsoft Entra Connect
Implement manage password hash synchronization (PHS)
Implement manage pass-through authentication (PTA)
Implement and manage federation
Trouble-shoot synchronization errors
Implement Microsoft Entra Connect Health
Manage Microsoft Entra Health

Topic 6: Secure Microsoft Entra users with multifactor authentication

What is Microsoft Entra multifactor authentication?
Plan your multifactor authentication deployment
Configure multi-factor authentication methods

Topic 7: Manage user authentication

Administer FIDO2 and passwordless authentication methods
Explore Authenticator app and OATH tokens
Implement an authentication solution based on Windows Hello for Business
Deploy and manage password protection
Configure smart lockout thresholds
Implement Kerberos and certificate-based authentication in Microsoft Entra ID
Configure Microsoft Entra user authentication for virtual machines

Topic 8: Plan, implement, and administer Conditional Access

Plan security defaults
Plan Conditional Access policies
Implement Conditional Access policy controls and assignments
Test and troubleshoot Conditional Access policies
Implement application controls
Implement session management
Implement continuous access evaluation

Topic 9: Manage Microsoft Entra Identity Protection

Review identity protection basics
Implement and manage user risk policy
Monitor, investigate, and remediate elevated risky users
Implement security for workload identities
Explore Microsoft Defender for Identity

Topic 10: Implement access management for Azure resources

Assign Azure roles
Configure custom Azure roles
Create and configure managed identities
Access Azure resources with managed identities
Analyze Azure role permissions
Configure Azure Key Vault RBAC policies
Retrieve objects from Azure Key Vault
Explore Microsoft Entra Permissions Management

Topic 11: Plan and design the integration of enterprise apps for SSO

Discover apps by using Microsoft Defender for Cloud Apps and Active Directory Federation Services app report
Configure connectors to apps
Design and implement app management roles
Configure preintegrated gallery SaaS apps
Implement and manage policies for OAuth apps

Topic 12: Implement and monitor the integration of enterprise apps for SSO

Implement token customizations
Implement and configure consent settings
Integrate on-premises apps with Microsoft Entra application proxy
Integrate custom SaaS apps for single sign-on
Implement application-based user provisioning
Monitor and audit access to Microsoft Entra integrated enterprise applications
Create and manage application collections

Topic 13: Implement app registration

Plan your line of business application registration strategy
Implement application registration
Register an application
Configure permission for an application
Grant tenant-wide admin consent to applications
Implement application authorization
Manage and monitor application by using app governance

Topic 14: Plan and implement entitlement management

Define access packages
Configure entitlement management
Configure and manage connected organizations
Review per-user entitlements

Topic 15: Plan, implement, and manage access review

Plan for access reviews
Create access reviews for groups and apps
Create and configure access review programs
Monitor access review findings
Automate access review management tasks
Configure recurring access reviews

Topic 16: Plan and implement privileged access

Define a privileged access strategy for administrative users
Configure Privileged Identity Management for Azure resources
Plan and configure Privileged Access Groups
Analyze Privileged Identity Management audit history and reports
Create and manage emergency access accounts

Topic 17: Monitor and maintain Microsoft Entra ID

Analyze and investigate sign-in logs to troubleshoot access issues
Review and monitor Microsoft Entra audit logs
Export logs to third-party security information and event management system
Analyze Microsoft Entra workbooks and reporting
Monitor security posture with Identity Secure Score

Final Assessment

Written Assessment - Short Answer Questions (WA-SAQ)
Practical Performance (PP)

Course Info

Promotion Code

Promo or discount cannot be applied to WSQ courses

Minimum Entry Requirement

Knowledge and Skills

Able to operate using computer functions
Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)

Attitude

Positive Learning Attitude
Enthusiastic Learner

Experience

Minimum of 1 year of working experience.

Target age group: 21-65 years old

Minimum Software/Hardware Requirement

Software:

You can download and install the following software:

Microsoft 365 Defender

Hardware: Windows and Mac Laptops

About Progressive Wage Model (PWM)

The Progressive Wage Model (PWM) helps to increase wages of workers through upgrading skills and improving productivity.

Employers must ensure that their Singapore citizen and PR workers meet the PWM training requirements of attaining at least 1 Workforce Skills Qualification (WSQ) Statement of Attainment, out of the list of approved WSQ training modules.

For more information on PWM, please visit MOM site.

Funding Eligility Criteria

Individual Sponsored Trainee

Employer Sponsored Trainee

Singapore Citizens or Singapore Permanent Residents of age 21 and above
From 1 October 2023, attendance-taking for SkillsFuture Singapore's (SSG) funded courses must be done digitally via the Singpass App. This applies to both physical and synchronous e-learning courses.
Trainee must pass all prescribed tests / assessments and attain 100% competency.
We reserves the right to claw back the funded amount from trainee if he/she did not meet the eligibility criteria.

Singapore Citizens or Singapore Permanent Residents who are DIRECT EMPLOYEE of the sponsoring company.
From 1 October 2023, attendance-taking for SkillsFuture Singapore's (SSG) funded courses must be done digitally via the Singpass App. This applies to both physical and synchronous e-learning courses.
Trainee must pass all prescribed tests / assessments and attain 100% competency.
We reserves the right to claw back the funded amount from the employer if trainee did not meet the eligibility criteria.

SkillsFuture Credit:

Eligible Singapore Citizens can use their SkillsFuture Credit to offset course fee payable after funding.

PSEA:

To check for Post-Secondary Education Account (PSEA) eligibility, goto mySkillsFuture portal and search for this course code.
Scroll down to "Keyword Tags" to verify for PSEA eligibility.
If there is “PSEA” under keyword tags, the course is eligible for PSEA.
And if there is no “PSEA” under keyword tags, the course is ineligible for PSEA.
Not all courses are eligible for PSEA funding.

Absentee Payroll (AP) Funding:

$4.50 per hour, capped at $100,000 per enterprise per calendar year.
AP funding will be computed based on the actual number of training hours attended by the trainee.

SFEC:

If the Training Provider has submitted an enrolment for course fee grant claim in Training Partners Gateway (TPGateway), SSG would be able to derive SFEC funding based on this record. There is no need for enterprise to submit any claim request and the SFEC claim will be automatically generated and disbursed.
Where there is no such record, eligible employers are required to submit an SFEC claim after course completion via the SFEC microsite.
SkillsFuture Enterprise Credit (SFEC) Microsite

Steps to Apply Skills Future Claim

The staff will send you an invoice with the fee breakdown.
Login to the MySkillsFuture portal, select the course you’re enrolling on and enter the course date and schedule.
Enter the course fee payable by you (including GST) and enter the amount of credit to claim.
Upload your invoice and click ‘Submit’

SkillsFuture Level-Up Program

The SkillsFuture Level-Up Programme provides greater structural support for mid-career Singaporeans aged 40 years and above to pursue a substantive skills reboot and stay relevant in a changing economy. For more information, visit SkillsFuture Level-Up Programme

Get Additional Course Fee Support Up to $500 under UTAP

The Union Training Assistance Programme (UTAP) is a training benefit provided to NTUC Union Members with an objective of encouraging them to upgrade with skills training. It is provided to minimize the training cost. If you are a NTUC Union Member then you can get 50% funding (capped at $500 per year) under Union Training Assistance Programme (UTAP).

For more information visit NTUC U Portal – Union Training Assistance Program (UTAP)

Steps to Apply UTAP

Note

SSG subsidy is available for Singapore Citizens, Permanent Residents, and Corporates.
All Singaporeans aged 25 and above can use their SkillsFuture Credit to pay. For more details, visit www.skillsfuture.gov.sg/credit
An unfunded course fee can be claimed via SkillsFuture Credit or paid in cash.
UTAP funding for NTUC Union Members is capped at $250 for 39 years and below and at $500 for 40 years and above.
UTAP support amount will be paid to training provider first and claimed after end of class by learner.

Appeal Process

The candidate has the right to disagree with the assessment decision made by the assessor.
When giving feedback to the candidate, the assessor must check with the candidate if he agrees with the assessment outcome.
If the candidate agrees with the assessment outcome, the assessor & the candidate must sign the Assessment Summary Record.
If the candidate disagrees with the assessment outcome, he/she should not sign in the Assessment Summary Record.
If the candidate intends to appeal the decision, he/she should first discuss the matter with the assessor/assessment manager.
If the candidate is still not satisfied with the decision, the candidate must notify the assessor of the decision to appeal. The assessor will reflect the candidate’s intention in the Feedback Section of the Assessment Summary Record.
The assessor will notify the assessor manager about the candidate’s intention to lodge an appeal.
The candidate must lodge the appeal within 7 days, giving reasons for appeal
The assessor can help the candidate with writing and lodging the appeal.
he assessment manager will collect information from the candidate & assessor and give a final decision.
A record of the appeal and any subsequent actions and findings will be made.
An Assessment Appeal Panel will be formed to review and give a decision.
The outcome of the appeal will be made known to the candidate within 2 weeks from the date the appeal was lodged.
The decision of the Assessment Appeal Panel is final and no further appeal will be entertained.
Please click the link below to fill up the Candidates Appeal Form.

Job Roles

Identity and Access Administrator
IT Security Specialist
Microsoft Entra Specialist
Systems Administrator
Network Administrator
Compliance Officer
Data Protection Officer
Cloud Security Analyst
Risk Management Specialist
IT Project Manager
Security Consultant
IT Auditor
Identity Solutions Architect
Cybersecurity Analyst
Access Control Technician
Security Operations Center (SOC) Analyst
Information Security Manager
IT Governance Specialist
Privileged Access Manager
Identity Management Engineer

Trainers

Sanjiv Venkatram: Sanjiv i is an ACTA certified experienced leader with a proven track record in business / finance consulting and in developing i) business intelligence (BI) solutions ii) data analytics/analysis solutions and iii) IOT lead BI solutions. Sanjiv's goal through Prudentia Consulting, is to promote the simple joy and excitement of actively using the Microsoft Platform. He believes that the agility afforded by the Microsoft platform helps businesses get time back for deeper business thinking and to spend more time with their end customers

Sanjiv has rich experiences in diverse/complex high-tech businesses, turn around environments and strategic transformations. His functional expertise is in sales analytics, financial planning and analysis, engineering and program management. He has worked across discrete manufacturing, professional services and higher education verticals. He also has a working knowledge of equities portfolio management within the financial services domain.Sanjiv is the CEO of Prudentia Consulting, an organization committed to promoting the active usage of the Microsoft Platform. Prior to this, he has worked at Microsoft (US & APAC: 9.2 years), Cognizant Tech Solutions (3.3 years), Yazaki North America (8 years) and until recently at Oracle. Here are a few of his BI/analytics projects driven at scale: Built APAC wide BI dashboard using the Power BI umbrella tool set (Power BI online, Power BI desktop and Power Pivot) and a KPI lake (SQL DB), Helped develop key KPIs – identified key KPIs and helped land this in the DB, Developed a budget audit tool that captured budget inputs from a host of countries across the globe, Developed a business unit P&L reporting tool (functional architecture) in Business Objects for the world-wide financial planning and analysis team.

Alec Tan: Alec Tan is a ACTA certified trainer, He has a number of Comptia certifications. Since 2002, starting off from IT technical background to pre-sales, sales account manager, system integration, operate IT retail / repair shop business in Sim Lim Square 2008 ~ 2012, and back to IT industry employment, freelance IT Trainer till present.

Kishan Raaj: Kishan Raaj is a seasoned Data Science and SAP Program Manager with over 15 years of experience, currently leading all end-to-end training and projects for Data Science across Asia at LITHAN, Singapore. With expertise in machine learning, data analytics, and cloud technologies, he is well-versed in techniques such as regression, decision trees, clustering, and text mining. He has hands-on experience with tools like Python, R, Tableau, PowerBI, and Microsoft Azure Machine Learning Studio.
As an ACTA certified trainer, Kishan has designed and delivered comprehensive courses for SAP and Data Science programs, managing teams and training in multiple countries, including Singapore, Malaysia, China, India, and Vietnam. His background in SAP, particularly in S4/HANA and ABAP, combined with his expertise in machine learning libraries such as TensorFlow and Keras, positions him as a highly capable leader in technical education and project management across various industries.

Quah Chee Yong: Quah Chee Yong is a ACTA certified trainer. Quah Chee Yong Chee Yong is an experienced professional who has held various Technical, Operations and Commercial positions across several industriesA firm believer that AI can create a better world, he has equipped himself with the Knowledge and Skills in the fields of Data Science, Machine Learning, Deep Learning and Cloud Deployment

He has a deep passion for training & facilitating and is currently a Singapore WSQ certified Adult Educator. He particularly enjoys the interactive engagements with his fellow trainers and learners

Peter Cheong : Peter is a ACLP certied trainer. Specialise In IT related knowlege and conduct IT Training which Include Microsoft Window Server Technology (Wintel) and Linux - Centos/Red Hat. Comptia ,ITIL , Motorola Solution Trunking System and Cisco Networking. I was worked in Motorola Solutions Conduct Motorola Astro 25 Trunking System For Police Force Malaysia (RMPnet),Taiwan Navy, Indonesia METRO POLDA (Police Force). After that Peter Join As IT Group Manager For W-Group which include 17 subsidiaries Companies in Real Estate Developer,Plantation, Building Management Services ,Contruction and also Fiber Opti Service Provider in Sabah,Malaysia.

Agus Salim is a professional with more than 10 years of experience in Project Management, IT Solutions Management, and Systems Integration both in waterfall and agile methodology. He started out his career as a Web Developer before moving on to Business Analyst/Project Manager. He has strong leadership and the capability of leading a team with a proven ability to deliver projects with tight timelines. Besides his experiences in managing projects, he has good knowledge in Cybersecurity and hands-on experience in Next Generation Firewall such as Check Point. During his free time, he likes to explore Cloud Technology, especially on Microsoft Azure. Agus has obtained AZ-104, AZ-500 and other Microsoft certifications. I am also a ALCP certified trainer.