Design Conditional Access that holds up
Build policies by user, location, device and app, set up MFA and session controls, and work out why a user got locked out.
No slide decks with narration. You configure Conditional Access, PIM and single sign-on in your own Entra tenant, troubleshoot what breaks, and keep the tenant when you're done.
See pricingWatching someone click through a portal doesn't prepare you for the day it's your tenant and your users who can't sign in. Doing it yourself does.
You stand up your own Entra tenant in Module 1, and every lab after that happens there. 9 modules and 59 lessons cover hybrid identity, Conditional Access, Privileged Identity Management, application integration, identity governance, tenant-to-tenant migration, and monitoring and troubleshooting, plus a 2026 SC-300 refresh on Identity Protection, Global Secure Access, managed identities and passwordless sign-in.
The labs go past the happy path. You'll troubleshoot lockouts and broken sign-ins, plan a migration cutover, and learn why each setting exists.
Build policies by user, location, device and app, set up MFA and session controls, and work out why a user got locked out.
Set up PIM role activation, run access reviews, and manage entitlements and lifecycle workflows so admin rights don't pile up.
Know when to use SAML, OIDC or OAuth, configure app registrations and enterprise apps, and fix SSO when it breaks.
Connect on-prem AD with Entra Connect, choose between PHS and PTA, and take a tenant-to-tenant migration from assessment to cutover.
Not a shared sandbox and not a recording of someone else's portal. Here's what you're working in.
I’ve spent 14+ years architecting and deploying identity solutions across federal and enterprise environments, including Microsoft Entra ID in production. I’ve been on both sides of the hiring table, so this course is built around what real Entra work looks like and what employers actually test for, not just exam trivia.
The course is aligned with Microsoft's SC-300 Identity and Access Administrator exam, so the topics line up with what the exam covers. The goal is different, though. You should be able to do the work, not only answer questions about it.
If you're sitting the exam, the labs give you hands-on time with the same features it asks about. Pro adds a 1:1 session on SC-300 exam strategy.
Two working identity practitioners got early access to this course before launch.
“No hiccups on my end! The walkthroughs were easy to follow, and standing up my own tenant is where it really stuck. Building it myself beat watching any tutorial. Honestly my only complaint is that I wish you’d made this course sooner, haha.”
“What sets this course apart is the real-world experience baked in. The mistakes to avoid, the naming conventions that actually hold up at scale, and the architecture decisions that matter. It’s consultant-level knowledge that translates directly into a more secure, efficient Entra ID environment that you won’t get in official Microsoft documentation. I highly recommend this course to Entra ID newbies and veterans alike!”
From students of the IAM Career Launchpad course and 1:1 coaching, taught the same way this course is.
“Spent the weekend going through Andrew's IAM Career Launchpad and I am glad I did. The course took a deep dive into key IAM components.”
“The clear explanation of how NIST guidelines shape identity validation connected a lot of dots for me. The hands-on labs make the learning even more valuable.”
“Knowing which acronym to use in a specific environment and the why behind it is most important. Andrew's course delivers exactly that kind of practical clarity — not just theory.”
No. You use the free directory that comes with an Azure sign-up. Premium features run on Microsoft's 31-day trial, and you should plan on about $20 of licensing to finish.
Pro adds two recorded 45-minute 1:1 sessions with Andrew. The first is SC-300 exam strategy and the second is IAM career strategy. Standard doesn't include a 1:1. Pro also includes an SC-300 cram sheet, a Conditional Access policy starter pack with 10 baseline policies, and an Entra ID interview guide with 25 questions answered from the hiring manager’s seat.
You get lifetime access to the course. Your lab tenant is yours either way, since it lives in your own Azure account.
No. Both Standard and Pro are a one-time payment.
No course can promise that, and this one doesn't. What it gives you is real work in a real tenant that you can walk an interviewer through.
Both Standard and Pro come with a 14-day money-back guarantee.
Enrollment opens in October. Join the waitlist and you’ll hear the day it does.
Leave your email and I’ll tell you when enrollment opens.
I email when there’s something worth your time. Not daily. Unsubscribe anytime.