MOC 10993A - Integrating On-Premises Identity Infrastructure with Microsoft Azure
Print
This Integrating On-Premises Identity Infrastructure with Microsoft Azure training class teaches IT professionals how to integrate their on-premises AD DS environment with Azure AD and how to use Azure AD as a directory service. It also teaches candidates how to use Azure RMS to protect sensitive documents. Additionally, it focuses on how to enhance authentication with multi-factor authentication and how to monitor directory synchronization health.
The primary audience for this course is existing IT professionals who have some knowledge and experience with Azure, and advanced experience with the Windows Server operating system. In addition, IT professionals who take this course typically want to develop knowledge of identity services integration between on-premises services and cloud services. This would typically include:
- AD DS administrators who are looking to train in cloud identity and access technologies.
- System or infrastructure administrators with general AD DS experience and knowledge, who are looking for more advanced identity training for Azure services.
Microsoft Certified Partner
Webucator is a Microsoft Certified Partner for Learning Solutions (CPLS). This class uses official Microsoft courseware and will be delivered by a Microsoft Certified Trainer (MCT).
Goals
- Learn to compare Azure AD to AD DS, perform Azure AD tenant provisioning, and manage objects and user roles in Azure AD.
- Learn to implement and configure directory synchronization and manage synchronized directories.
- Learn to use Azure AD as a directory service for an on-premises environment, configure single sign-on (SSO) in Azure AD, and protect privileged identities.
- Learn to implement multi-factor authentication.
- Learn to implement Azure RMS and integrate Azure RMS with on-premises services.
- Learn to configure alerts and monitor directory services infrastructure.
Outline
- Introducing Azure AD
- Azure AD overview
- Implementing and configuring Azure AD
- Managing Azure AD
- Lab: Creating and managing an Azure AD tenant
- Activating Azure and Office 365 trial subscriptions
- Configuring an Azure AD tenant and objects in Azure AD
- Configuring user roles in Azure AD
- Integrating on-premises Active Directory with Azure
- Extending an on-premises Active Directory domain to Azure
- Directory synchronization overview
- Implementing and configuring directory synchronization
- Managing synchronized directories
- Lab: Implementing directory synchronization
- Implementing Azure AD Connect
- Managing directory synchronization
- Using Azure AD as a directory service in hybrid environments
- Azure AD as a directory service for on-premises environments
- Configuring SSO with Azure AD
- Implementing Azure AD PIM
- Lab: Using Azure AD in hybrid environments
- Joining a Windows 10 computer to Azure AD
- Implementing SSO with Azure AD
- Configuring and using Azure AD PIM
- Configuring and protecting authentication in hybrid environments
- Authenticating users in hybrid environments
- Implementing multi-factor authentication
- Lab: Configuring authentication in hybrid environments
- Implementing user password reset policy
- Implementing Multi-Factor Authentication
- Implementing Multi-Factor Authentication Server on premises
- Deploying Azure RMS with on-premises services
- RMS overview
- Implementing Azure RMS
- Integrating Azure RMS with on-premises services
- Lab: Implementing Azure RMS
- Enabling and configuring Azure RMS
- Integrating Azure RMS with FCI
- Using the RMS sharing application on a client
- Monitoring Azure AD
- Azure AD reporting
- Monitoring Azure AD
- Lab: Configuring reporting and monitoring
- Configuring Azure AD reports and notifications
- Configuring Azure AD monitoring
Class Materials
Each student in our Live Online and our Onsite classes receives a comprehensive set of materials, including course notes and all the class examples.
Class Prerequisites
Experience in the following is required for this Azure class:
- Completed the Microsoft Certified Systems Administrator (MCSA) certification in Windows Server 2012.
- Understanding of on-premises virtualization technologies, including: virtual machines, virtual networking, and virtual hard disks (VHDs).
- Understanding of network configuration, including: TCP/IP, Domain Name System (DNS), virtual private networks (VPNs), firewalls, and encryption technologies.
- Understanding of websites, including: how to create, configure, monitor and deploy a website on Internet Information Services (IIS).
- Understanding of Active Directory concepts, including: domains, forests, domain controllers, replication, Kerberos protocol, and Lightweight Directory Access Protocol (LDAP).
- Understanding of database concepts, including: tables, queries, Structured Query Language (SQL), and database schemas.
- Understanding of resilience and disaster recovery, including backup and restore operations.
Experience in the following would be useful for this Azure class:
- Experience with AD DS concepts and technologies in Windows Server 2012 or Windows Server 2016.
- Experience working with and configuring Windows Server 2012 or Windows Server 2016.
- Basic experience with Windows PowerShell.
- Basic experience with cloud services such as Microsoft Office 365.
- Basic experience with the Azure platform.
- Basic experience with identities on premises or in cloud.
Preparing for Class