Microsoft Entra ID Identity Management

Microsoft Entra Overview

Microsoft Entra is a product family that brings together Microsoft’s identity and access management capabilities, including identity, governance, protection, and verifiable credentials. Microsoft Entra ID serves as the core identity service, providing centralized authentication and authorization for cloud, on-premises, and third-party applications.

• Microsoft Entra Overview
• Microsoft Entra ID Overview
• Microsoft Entra ID Editions
• Directories and Domains
• Add a custom domain to Microsoft Entra ID
• LAB: Microsoft Entra ID Overview

Entra ID Users, Groups and Devices

Microsoft Entra ID allows you to manage different types of directory objects that are used to control access to resources. Users represent people and service accounts, groups are used to manage permissions and licenses, and devices enable identity-based management of Windows and mobile systems.

• User Management
• Group Management
• Dynamic Groups
• Role Assignable Groups
• Group-based Licensing
• Group Settings
• Device Management
• Manage Entra ID Objects with the Microsoft Graph PowerShell Module
• LAB: Entra ID Users, Groups and Devices

Entra ID Features

Microsoft Entra ID supports a wide range of authentication and identity-related features that enhance both security and user experience. These features allow you to configure secure sign-in methods, enforce authentication policies, and customize how users interact with your organization’s identity platform.

• Authentication Methods
• Multi-Factor Authentication
• Password Management
• Company Branding
• Custom Security Attributes
• LAB: Entra ID Features

Entra ID Roles

Administrative roles in Entra ID determine who is allowed to manage identity-related settings and perform privileged tasks. Entra ID provides built-in and custom roles, as well as just-in-time access through Privileged Identity Management, allowing organizations to reduce standing administrative privileges.

• Entra ID Roles
• Managing Roles with the Microsoft Graph PowerShell Module
• Administrative Units
• Privileged Identity Management (PIM)
• LAB: Entra ID Roles

Entra ID Protection

Identity is a critical security boundary in modern cloud environments and must be protected accordingly. Entra ID Protection and Conditional Access help detect risky sign-ins, evaluate user and device risk, and enforce access controls based on security conditions and policies.

• Single Sign On
• Identity Protection
• Conditional Access
• LAB: Entra ID Protection

Entra ID Application Management

Microsoft Entra ID enables single sign-on (SSO) for applications by acting as a centralized identity provider. Applications can be cloud-based, on-premises, or custom-developed, allowing organizations to securely manage authentication and access to a wide range of workloads.

• Application Management Overview
• Gallery Applications
• Entra ID Private Network Connectors
• Custom Developed Applications
• Managed Identities
• LAB: Entra ID Application Management

Entra Connect

Many organizations operate in hybrid environments where identities exist both on-premises and in the cloud. Entra Connect enables synchronization of on-premises Active Directory objects to Entra ID, providing a unified identity experience across environments.

• Directory Synchronization
• Entra Connect
• Entra Sync Options: Entra Connect Sync versus Entra Cloud Sync
• Entra Connect Health
• LAB: Entra Connect

Entra ID Authentication Options

When using synchronized identities, Entra ID supports multiple authentication models for validating user sign-ins. Each method offers different security characteristics, availability requirements, and operational complexity, making it important to understand their advantages and limitations.

• Password Hash Sync
• Pass-Through Authentication
• Seamless Single Sign On
• Federation
• Compare Authentication Solutions
• LAB: Entra ID Authentication Options

Microsoft Entra External ID

Microsoft Entra External ID allows organizations to securely collaborate with external users and provide access to applications and resources. External users can authenticate using identities from other organizations or consumer identity providers, while administrators maintain control over access and permissions.

• External Identities Overview
• Identity Providers
• Microsoft Entra External ID for Business Guests (B2B)
• Guest Access
• Cross-Tenant Sync
• B2B Direct Connect
• Microsoft Entra External ID for Customers (B2C)
• LAB: Microsoft Entra External ID

Entra ID Identity Governance

Managing access for both internal and external users requires strong governance controls to ensure security and compliance. Entra ID Identity Governance helps manage the identity and access lifecycle by controlling how access is granted, reviewed, and removed over time.

• Entra ID Identity Governance Overview
• Entra ID Entitlement Management
• Access Packages
• Connected Organizations
• Access Reviews
• LAB: Entra ID Identity Governance

Microsoft Entra Global Secure Access

Microsoft Entra Global Secure Access applies identity-based controls to network access using Zero Trust principles. It enables secure access to internet resources and private applications by enforcing identity, device, and conditional access policies at the network layer.

• Global Secure Access Overview
• Zero Trust Networking and Security Service Edge
• Architecture and Traffic Flow
• Internet Access versus Private Access: Use Cases and Architecture
• Deploy Microsoft Entra Internet Access
• Deploy Microsoft Entra Private Access
• Client Deployment and Management
• Conditional Access Integration with Global Secure Access
• LAB: Microsoft Entra Global Secure Access

Microsoft Entra Verified ID

Microsoft Entra Verified ID enables decentralized identity scenarios using verifiable credentials. It allows organizations to issue, verify, and trust credentials without relying on centralized identity stores, improving privacy, security, and trust across organizational boundaries.

• Centralized versus Decentralized Identity Models
• Verifiable Credentials and Dentralized Identifiers (DIDs)
• Verified IDs Use Cases and Trust Framework
• Issuer, Verifier and Holder Roles
• Credential Types and Lifecycle
• Integration with Applications
• Deploy Microsoft Entra Verified ID
• LAB: Microsoft Entra Verified ID