Microsoft Entra ID Training (formerly Azure AD)

Explore Microsoft Entra ID training at Mohansh Technologies. Microsoft Entra ID is the current name for Azure Active Directory (Azure AD); Microsoft Azure is the wider cloud platform.

Discuss your IAM experience, SSO learning goals and preferred start date. Call +91 9154465446 or +91 8121557753 for the current syllabus, fees and demo availability.

Call us for more Details

Who Should Enquire About Microsoft Entra ID Training?

IT professionals and career changers exploring identity administration, IAM or SSO can discuss their goals with our team. Share your current experience with user accounts, networking and cloud services so we can assess prerequisites and the appropriate starting point.

Plan Your Training Before Enrolling

Ask for the current syllabus and a sample lesson. Confirm prerequisites, practical exercises, lab access requirements, trainer details, duration and fees with the team.

Share your country/time zone, available study hours and intended start date so we can discuss a suitable schedule. Confirm what is included before enrolling; course availability does not guarantee certification or employment.

Microsoft Entra ID, IAM and SSO: Understand the Terms

45-Hour Microsoft Entra ID Course Content

Duration: 45 hours | Delivery: Live training with hands-on practice | Level: Beginner to advanced

Explore enterprise identity and access management, authentication, MFA, Conditional Access, cloud and on-premises application integration, monitoring and troubleshooting through practical configuration and application onboarding.

Prerequisites

No mandatory prerequisite. Basic knowledge of Windows, networking, Active Directory, web applications and cloud concepts is helpful.

01 Entra ID & IAM Foundations — 3 hours

Microsoft Entra product family and Microsoft Entra ID architecture
Tenant, directory, subscription and Azure resource relationship
Identity types: member, guest, service principal, managed identity and workload identity
Authentication vs authorization; AAA concepts; Zero Trust and least privilege
Microsoft Entra ID vs Windows Server Active Directory Domain Services
Admin center navigation, licenses, roles and administrative units
LAB: Create/prepare a tenant, users, groups and baseline administrative roles

02 Users, Groups, Roles & External Identities — 3 hours

Create, update, bulk manage and delete users; user properties and usage location
Security groups, Microsoft 365 groups, dynamic membership and group-based assignment
Directory roles, custom roles, role assignment scope and least privilege
Administrative Units and delegated administration
External identities: B2B collaboration, cross-tenant access concepts and guest lifecycle
LAB: Dynamic groups, guest invitation, group/app assignment and delegated administration

03 Authentication Methods & Passwordless — 4 hours

Authentication flow fundamentals and primary/secondary authentication
Password policies, Password Hash Synchronization concepts and self-service password reset
MFA registration and modern authentication-method policy
Microsoft Authenticator, passkeys/FIDO2, Windows Hello for Business and certificate-based authentication overview
Temporary Access Pass (TAP) for passwordless onboarding/recovery
Authentication strengths and phishing-resistant MFA
System-preferred MFA and migration away from legacy authentication methods
LAB: Configure authentication methods, TAP, passwordless registration and authentication strength

04 SSO Fundamentals & SAML 2.0 — 5 hours

SSO concepts: federation, claims, tokens, IdP, SP, metadata and trust
SP-initiated vs IdP-initiated SSO
SAML 2.0 flow: AuthnRequest, SAML Response, Assertion, NameID and attributes
Entity ID / Identifier, Reply URL / ACS URL, Sign-on URL, RelayState and logout concepts
Signing certificate, token-signing validation and certificate rollover
Claims mapping, transformations, group/role claims and application assignment
Gallery vs non-gallery Enterprise Applications
Common SAML errors: reply URL mismatch, audience mismatch, invalid signature, clock skew, missing claims
LAB: Configure a non-gallery SAML enterprise application and troubleshoot sign-in

05 OAuth 2.0 & OpenID Connect — 5 hours

OAuth 2.0 roles: resource owner, client, authorization server and resource server
OIDC identity layer: ID token, UserInfo and scopes such as openid/profile/email
Authorization Code flow with PKCE for modern apps
Client Credentials flow for daemon/service-to-service applications
Refresh tokens, access tokens, ID tokens, scopes, delegated vs application permissions
JWT structure, claims, signature, issuer, audience, expiry and token validation
Microsoft identity platform endpoints and discovery metadata
MSAL concepts and secure token acquisition
Consent: user consent, admin consent and permission governance
LAB: Authorization Code/PKCE and Client Credentials token troubleshooting

06 App Registrations, Enterprise Apps & Workload Identity — 4 hours

App registration vs Enterprise Application (service principal)
Single-tenant vs multitenant applications
Redirect URIs, platform configuration and public vs confidential clients
Client secrets vs certificates; credential lifecycle and rotation
Expose an API: scopes and app roles
API permissions, consent framework and assignment required
Managed identities: system-assigned vs user-assigned
Workload identities and Conditional Access concepts for workloads
LAB: Register web/API applications, configure app roles/scopes and managed identity access

07 Conditional Access, Identity Protection & Session Security — 5 hours

Conditional Access: assignments, conditions, grant controls and session controls
Users/groups, target resources, device platforms, locations, client apps and device filters
Require MFA, authentication strength, compliant device and hybrid joined device scenarios
Report-only mode, What If analysis, exclusions and emergency access design
Identity Protection: user risk, sign-in risk and risk remediation
Sign-in frequency, persistent browser session and application-enforced restrictions
Continuous Access Evaluation (CAE) concepts
Token Protection / device-bound sign-in session concepts and token replay mitigation
LAB: Build staged Conditional Access policies for admins, users and risky sign-ins

08 Hybrid Identity & Application Proxy — 4 hours

Hybrid identity architecture and identity source-of-authority concepts
Microsoft Entra Connect Sync vs Cloud Sync – use cases and planning
Password Hash Sync, Pass-through Authentication and federation concepts
UPN/domain planning, synchronization scope and common sync troubleshooting
Microsoft Entra Application Proxy: connector, connector group, internal/external URL
Preauthentication, header/claims concepts and SSO options for legacy/on-premises apps
Kerberos Constrained Delegation concept for Integrated Windows Authentication
LAB: Design hybrid sync and publish a sample on-premises application

09 Provisioning, Governance & Privileged Access — 4 hours

Automated application provisioning/deprovisioning and SCIM concepts
Attribute mappings, provisioning scope, on-demand provisioning and provisioning logs
Privileged Identity Management (PIM): eligible vs active assignments, activation, approval and MFA
Access Reviews for groups, applications and privileged roles
Entitlement Management: catalogs, access packages, request/approval/expiration policies
Lifecycle Workflows: Joiner-Mover-Leaver automation
Terms of Use and governance reporting concepts
LAB: Access review / PIM scenario and Joiner-Mover-Leaver workflow

10 Monitoring, Troubleshooting, Security Operations & Capstone — 4 hours

Interactive and non-interactive sign-in logs, audit logs and provisioning logs
Conditional Access result analysis and authentication details
Troubleshooting SAML, OAuth/OIDC, MFA, Conditional Access, consent and provisioning
Service principal sign-ins and managed identity sign-ins
Microsoft Graph overview for identity administration and automation
Operational practices: certificate/secret expiry, access recertification, emergency access and change control
Capstone: workforce + guests + SAML SaaS + OIDC app + legacy app + Conditional Access + governance
Interview preparation: architecture questions, production incidents and troubleshooting scenarios

11 Final Project, Mock Interview & Assessment — 4 hours

Hands-on final project implementation and validation
Scenario-based troubleshooting assessment
Resume/project explanation for Entra ID responsibilities
Mock interview: SSO, SAML, OAuth/OIDC, MFA, Conditional Access, hybrid identity and governance
Review of common production support tickets and root-cause analysis

Enquire About This Course

Tell us your learning goal, experience, country/time zone and intended start date. Confirm current fees, batch timings and lab access requirements before enrolling.

Call +91 9154465446 or +91 8121557753. Email peddinenimohansh@gmail.com.