Integrating On-Premises Identity Infrastructure with Microsoft Azure (10993)

Microsoft | Azure Cloud Services

About this Course

This course teaches IT professionals how to integrate their on-premises AD DS environment with Azure AD and how to use Azure AD as a directory service. It also teaches candidates how to use Azure RMS to protect sensitive documents. Additionally, it focusses on how to enhance authentication with multi-factor authentication and how to monitor directory synchronization health.

Audience Profile

The primary audience for this course is existing IT professionals who have some knowledge and experience with Azure, and advanced experience with the Windows Server operating system. In addition, IT professionals who take this course typically want to develop knowledge of identity services integration between on-premises services and cloud services. This would typically include:

  • AD DS administrators who are looking to train in cloud identity and access technologies.
  • System or infrastructure administrators with general AD DS experience and knowledge, who are looking for more advanced identity training for Azure services.

At Course Completion

After completing this course, students will be able to:

  • Compare Azure AD to AD DS, perform Azure AD tenant provisioning, and manage objects and user roles in Azure AD.
  • Implement and configure directory synchronization and manage synchronized directories.
  • Use Azure AD as a directory service for an on-premises environment, configure single sign-on (SSO) in Azure AD, and protect privileged identities.
  • Implement multi-factor authentication.
  • Implement Azure RMS and integrate Azure RMS with on-premises services.
  • Configure alerts and monitor directory services infrastructure.

Prerequisites

In addition to their professional experience, students who attend this training should already have the following technical knowledge:

  • Experience with AD DS concepts and technologies in Windows Server 2012 or Windows Server 2016.
  • Experience working with and configuring Windows Server 2012 or Windows Server 2016.
  • Basic experience with Windows PowerShell.
  • Basic experience with cloud services such as Microsoft Office 365.
  • Basic experience with the Azure platform.
  • Basic experience with identities on premises or in cloud.

Course Outline

Module 1: Introducing Azure AD

This module describes the differences between Azure AD and AD DS, and the Azure AD versions. It also explains how to perform Azure AD tenant provisioning and how to manage objects and user roles in Azure AD.

Lessons

  • Azure AD overview
  • Implementing and configuring Azure AD
  • Managing Azure AD

Lab : Creating and managing an Azure AD tenant

  • Activating an Azure trial subscription
  • Creating an Azure AD tenant and objects in Azure AD
  • Configuring user roles in Azure AD

After completing this module, students will be able to:

  • Describe Azure AD and compare it to AD DS.
  • Explain Azure AD versions and describe how to perform Azure AD tenant provisioning.
  • Manage objects and user roles in Azure AD.

Module 2: Integrating on-premises AD DS with Azure

This module explains how to extend an on-premises Active Directory domain to Azure, and how directory synchronization works. It also describes how to implement and configure directory synchronization. Additionally, this module describes how to manage synchronized directories.

Lessons

  • Extending an on-premises Active Directory domain to Azure
  • Directory synchronization overview
  • Implementing and configuring directory synchronization
  • Managing synchronized directories

Lab : Implementing directory synchronization

  • Implementing Azure AD Connect
  • Managing directory synchronization

After completing this module, students will be able to:

  • Explain how to extend AD DS to the Azure platform.
  • Describe directory synchronization.
  • Implement and configure directory synchronization.
  • Manage synchronized directories.

Module 3: Using Azure AD as a directory service in hybrid environments

This module explains how to use Azure AD as a directory service for an on-premises environment, and how to configure SSO in Azure AD. Also it describes how to implement privileged identity management in Azure AD.

Lessons

  • Azure AD as a directory service for on-premises environments
  • Configuring SSO with Azure AD
  • Implementing privileged identity management in Azure AD

Lab : Using Azure AD in hybrid environments

  • Joining a Windows 10 computer to Azure AD
  • Implementing SSO with Azure AD
  • Configuring and using Azure AD Privileged Identity Management

After completing this module, students will be able to:

  • Describe how to use Azure AD as a directory service for an on-premises environment.
  • Configure SSO in Azure AD.
  • Explain how to protect privileged identities.

Module 4: Configuring and protecting authentication in hybrid environments

This module explains how authentication works in hybrid environments. In addition, it describes how to implement Azure Multi-Factor Authentication.

Lessons

  • Authentication in hybrid environments
  • Implementing Azure Multi-Factor Authentication

Lab : Configuring authentication in hybrid environments

  • Implementing self-service password reset
  • Implementing Azure Multi-Factor Authentication
  • Implementing Azure Multi-Factor Authentication Server on-premises

After completing this module, students will be able to:

  • Describe how authentication works.
  • Implement Azure Multi-Factor Authentication.

Module 5: Deploying Azure RMS with on-premises services

This module explains how rights management technologies, Active Directory RMS, and Azure RMS work. In addition, it describes how to implement Azure RMS, and how to integrate Azure RMS with on-premises services.

Lessons

  • RMS overview
  • Implementing Azure RMS
  • Integrating Azure RMS with on-premises services

Lab : Implementing Azure RMS

  • Enabling and configuring Azure RMS
  • Integrating Azure RMS with File Classification Infrastructure (FCI)
  • Using the RMS sharing application on a client

After completing this module, students will be able to:

  • Describe the rights management technologies, AD RMS and Azure RMS.
  • Implement Azure RMS.
  • Integrate Azure RMS with on-premises services.

Module 6: Monitoring Azure AD

This module describes reports on Azure AD and explains how to configure alerts. It also describes how to monitor directory services infrastructure.

Lessons

  • Azure AD reporting
  • Monitoring Azure AD

Lab : Configuring reporting and monitoring

  • Configuring Azure AD reports and notifications
  • Configuring Azure AD monitoring

After completing this module, students will be able to:

  • Describe reports on Azure AD and describe how to configure alerts.
  • Monitor directory services infrastructure.

About this Modality

Now you can build Microsoft technical experience while balancing the demands of your schedule. MOC On-Demand combines high-quality video, reading, live hands-on labs and knowledge checks in a self-paced format to help you build skills on Microsoft technologies as you schedule allows – all at once or five minutes at a time. The modular, self-directed course structure adapts to your learning needs and learning style.

Brought to you by the people who write the software, Microsoft Official Courses On-Demand are only available through certified Microsoft Learning Partners like Tandem Solution.

Our On-Demand Solution Includes all of the following:

  • 90-day access to training videos
  • 90-day access to hands-on labs
  • 90-day access to exercises
  • Knowledge Checks

The benefits of our On-Demand solution are: 

  • MICROSOFT OFFICIAL: The content is based on the same official courseware used in instructor-led training and maps to the MOC flow
  • LIVE HANDS-ON LABS: Unlike other on-demand offerings that offer simulated labs, MOC On-Demand gives you a live, real-time environment for hands-on learning
  • SELF-PACED LEARNING: With MOC On-Demand, you can build deep technical skills on a range of Microsoft technologies when you choose, where you choose
  • HIGH-QUALITY CONTENT: The high-quality videos offer in-depth technical content delivered by engaging instructors
  • IMMEDIATE FFEDBACK: Knowledge checks at the end of each module and each course tells you whether you’ve mastered the content and are ready to move on

On-Demand Add-ons:

  • Lifetime eBook available at an additional cost
  • 6 month lab access available at an additional cost

*SATV Vouchers are accepted

Instructor-Led Dates
June 05 Register
August 14 Register
October 23 Register

Live | Virtual | Guaranteed

Duration: 2 Day Training class

*Click on date for more information

Delivery Options
$1,198.00 Register
$695.00 Register

Request Information
Full Name:
Company:
Email Address:
Phone Number