IAM & Identity
Entra ID & Identity Security Mastery
Own the identity control plane: authentication, authorisation and governance.
- 9 modules
- 14 labs
- ~18 hours
- Intermediate
- Hands-on Labs
- Certificate
Course overview
Identity is the perimeter. This course walks through Microsoft Entra ID end to end — authentication methods, Conditional Access, privileged access, and identity governance — with hands-on configuration in your own tenant.
You build a Zero Trust identity baseline, review privileged roles, and produce access review evidence you can show an employer or auditor.
What you will be able to do
- Configure secure authentication and MFA policies
- Design and test Conditional Access policies safely
- Implement least-privilege role assignment and PIM
- Run access reviews and identity governance workflows
- Secure service principals and managed identities
Curriculum
- 1
Identity Fundamentals
Directories, protocols and trust.
- Authentication vs authorisation
- SAML, OAuth 2.0 and OIDC
- Tokens and claims
- 2
Entra ID Tenant Setup
Build the tenant you will secure.
- Free tenant creation
- Users, groups and licensing
- Naming and hygiene
- 3
Authentication & MFA
Phishing-resistant by default.
- Authentication methods policy
- Passwordless and FIDO2
- Legacy authentication blocking
- 4
Conditional Access
Policy design without locking yourself out.
- Policy anatomy
- Report-only rollout
- Device and risk conditions
- Break-glass accounts
- 5
Privileged Access
Limit standing admin rights.
- Role model design
- PIM activation and approvals
- Admin tiering
- Monitoring privileged activity
- 6
Identity Governance
Prove access is correct over time.
- Access packages
- Access reviews
- Lifecycle workflows
- Service principal hygiene
Labs you will build
PrimeSec does not hand you a pre-built machine. You get professional lab guides and build the environment yourself — that is where the skill comes from.
- Create and baseline a free Entra ID tenant
- Enforce MFA with an authentication methods policy
- Roll out Conditional Access in report-only mode
- Block legacy authentication and validate impact
- Configure PIM with approval workflows
- Run an access review and export evidence
- Audit service principals and app consent
Portfolio projects
- A Zero Trust identity baseline document for a fictional org
- A Conditional Access policy set with rollout plan
- An access review and privileged-role audit report
Frequently asked questions
Do you provide the lab environment?
No — and that is intentional. PrimeSec gives you professional lab guides that teach you to build and configure the environment yourself using your own machine, Hyper-V, VMware, VirtualBox, Docker, or a cloud free tier. Building and troubleshooting the environment is part of the skill.
Is this course self-paced?
Entra ID & Identity Security Mastery is self-paced. Lessons, knowledge checks, labs and projects unlock in order so you always know what to do next.
Do I get a certificate?
You receive a PrimeSec course completion certificate once every module, lab and project requirement is met. It demonstrates completion and practical work — not an accredited industry certification.
Will cloud labs cost me money?
Labs are designed around free tiers and local virtualisation wherever possible, and every cloud lab includes cleanup steps so you do not leave billable resources running.
Related courses
Cloud Security
Cloud Security Engineer Bootcamp
Intermediate · 14 modules · 22 labs
AI Security
AI Security Fundamentals: Protecting AI Systems
Intermediate · 10 modules · 16 labs
DevSecOps
DevSecOps Engineering: Secure CI/CD Pipelines
Intermediate · 12 modules · 18 labs