Microsoft Entra (formerly Azure Active Directory)

1. Microsoft Entra ID architecture and advanced identity management

• Microsoft Entra ID architecture and the service's place in the Microsoft ecosystem,
• tenant, subscriptions, directories and dependencies between services,
• designing the identity model for cloud and hybrid environments,
• best practices for administration and separation of privileges,
• overview of Microsoft Entra services and their applications in the organization.

2. Identity synchronization – Microsoft Entra Cloud Sync and hybrid environments

• Microsoft Entra Cloud Sync as a modern approach to identity synchronization,
• differences between Microsoft Entra Cloud Sync and Microsoft Entra Connect Sync,
• configuration and management of Cloud Sync agents,
• synchronization of users, groups and selected attributes,
• filtering the synchronization scope and attribute mapping,
• diagnostics of synchronization errors and monitoring,
• migration scenarios from existing synchronization mechanisms.

3. Advanced authentication and phishing-resistant methods

• Multi-Factor Authentication – design and implementation,
• Authentication Methods Policy,
• passwordless authentication,
• Windows Hello for Business,
• FIDO2 Security Keys and passkeys,
• Temporary Access Pass,
• designing a secure authentication strategy for different user groups,
• limiting the use of older and less secure authentication methods.

4. Conditional Access – designing advanced access policies

• architecture and operating mechanism of Conditional Access,
• designing policies for users, administrators, devices and applications,
• use of conditions: location, device, application, risk level and sign-in context,
• Authentication Strengths and enforcing specific authentication methods,
• policies for privileged and administrative accounts,
• blocking legacy authentication,
• designing policies in accordance with the Zero Trust principle,
• Report-only mode, testing and safe implementation of changes,
• preventing administrator lockout and use of emergency accounts,
• analysis of typical configuration errors and Conditional Access best practices.

5. Microsoft Entra ID Protection and identity risk management

• User Risk and Sign-in Risk,
• detection of suspicious sign-ins and compromised accounts,
• automatic responses to high-risk events,
• integration of Identity Protection with Conditional Access,
• Risk-based Conditional Access,
• analysis of alerts and security events,
• incident response process related to identity,
• best practices for reducing the risk of account compromise.

6. Microsoft Entra ID Governance – identity and access lifecycle management

• Microsoft Entra ID Governance architecture,
• Lifecycle Workflows – automation of Joiner, Mover, Leaver processes,
• Entitlement Management and Access Packages,
• resource catalogs and delegation of access management,
• Access Reviews – periodic verification of access,
• automatic expiration of unnecessary permissions,
• management of external users and B2B access,
• design of the process of granting, reviewing and revoking access,
• use of Governance to fulfill audit and compliance requirements.

7. Privileged Identity Management and securing privileged accounts

• Microsoft Entra Privileged Identity Management (PIM),
• eligible and active roles,
• Just-In-Time permission activation,
• requiring MFA, justification and approval during role activation,
• limiting the duration of possessing high privileges,
• alerts regarding privileged roles,
• Access Reviews for administrative accounts,
• designing an administration model compliant with the least privilege principle,
• best practices for securing Global Administrator and other critical roles.

8. Managing applications, Enterprise Applications and access to services

• Application Registrations and Enterprise Applications,
• differences between an application, Service Principal and Managed Identity,
• OAuth 2.0, OpenID Connect and SAML in practice,
• Single Sign-On configuration,
• delegated and application API permissions,
• admin consent and management of user consents,
• limiting excessive application permissions,
• Managed Identities for Azure resources,
• risk analysis of applications with high permissions,
• secure integration of applications with Microsoft Graph.

9. Devices, Intune and access compliant with the Zero Trust model

• Microsoft Entra Join, Hybrid Join and Entra Registered,
• device identity management,
• integration of Microsoft Entra ID with Microsoft Intune,
• Device Compliance as an element of Conditional Access policies,
• access to resources exclusively from devices meeting the organization's requirements,
• BYOD and corporate device scenarios,
• designing user–device–application access policies,
• application of Zero Trust principles in practical organizational scenarios.

10. Monitoring, troubleshooting, automation and security best practices

• Sign-in Logs and Audit Logs – advanced event analysis,
• diagnostics of issues with authentication, SSO and Conditional Access,
• analysis of the operation of Conditional Access policies for a specific user,
• monitoring of administrative changes and privileged operations,
• use of Microsoft Graph and PowerShell for managing Microsoft Entra ID,
• automation of bulk changes and reporting,
• preparation of the environment for a security audit,
• review of the most common configuration errors,
• building a Microsoft Entra ID security checklist,
• recommendations regarding environment hardening and further development of security policies.