IT Skills     Cloud Computing and Virtualization     Microsoft     AZ-305: Designing Microsoft Azure Infrastructure Solutions

---

Azure AD authentication and authorization security settings are required to verify user identities. Security identity objects such as Azure service principals and managed identities are two options provided to authenticate users and grant access to Azure AD resources.
Begin by exploring how authentication and authorization differ and when identity federation should be used. Discover how to provide permissions to software through service principles and managed identities. Finally, explore how to utilize Azure AD access reviews and enable various Azure AD security features such as multi-factor authentication (MFA), conditional access, password reset, and group management.
This course can be used to prepare for Exam AZ-305: Designing Microsoft Azure Infrastructure Solutions.

---

---

Objectives

AZ-305 - Microsoft Azure Infrastructure Solutions: Authentication discover the key concepts covered in this course differentiate between authentication and authorization mechanisms identify when identity federation should be used differentiate between Azure service principals and managed identities demonstrate how to use the portal to manage Azure service principles demonstrate how to use the portal to manage Azure managed identities enable multi-factor authentication (MFA) for Azure AD users configure Azure AD conditional access enable self-service password reset (SSPR) to reduce the help desk burden enable Self-service Group Management (SSGM) to reduce the help desk burden demonstration how to ensure users have only the required permissions through an Azure AD access review identify when and how Azure AD Connect should be used link on-premises Active Directory to an Azure AD tenant summarize the key concepts covered in this course