Implement authentication and access in Microsoft Entra
Advanced
Administrator
Microsoft Entra ID
Microsoft 365
Microsoft 365 Admin Center
Configure authentication methods, Password Protection, self-service password reset, and Conditional Access policies that respond to sign-in risk, user risk, and device compliance, and investigate authentication issues using the Sign-in logs, Sign-in diagnostic, and What If tool.
Learning objectives
After completing this module, you will be able to:
- Evaluate the Microsoft Entra authentication method catalog and configure the unified Authentication methods policy to scope methods to a target group.
- Enforce Microsoft Entra Password Protection with the global and custom banned password lists and smart lockout for cloud accounts.
- Enable and troubleshoot self-service password reset (SSPR) registration, method requirements, and enablement scope.
- Evaluate multiple interacting Conditional Access policies, including client app conditions, to determine sign-in outcomes.
- Investigate and resolve authentication issues using the Sign-in logs, the Sign-in diagnostic, and the Conditional Access What If tool.
- Design Conditional Access policies that respond to sign-in risk, user risk, and device compliance state.
Prerequisites
- Familiarity with Microsoft Entra users and groups.
- Understanding of multifactor authentication (MFA) concepts.