Microsoft · SC-900
Identity concepts
SC-900 · Lesson 2 of 15 · 10:38
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-900 exam (Microsoft Security, Compliance, and Identity Fundamentals). In this lesson: identity as the primary security perimeter (people, devices, workloads and AI agents), the four pillars of identity, authentication and authorization, identity providers, security tokens and claims, OpenID Connect, OAuth 2.0 and SAML, single sign-on, directory services and Active Directory Domain Services, Microsoft Entra ID as their cloud evolution, hybrid identity, and federation, whose trusts aren't automatically two-way. Includes three original practice questions.
Preview the topics
- After an incident, investigators need to know which account opened a sensitive file, at what time, and from which location. Which pillar of identity answers that?
- An app sends users to Microsoft Entra ID to sign in, then calls an API to read their calendar on their behalf. What does the app present to that API?
- Contoso’s identity provider trusts Fabrikam’s, so Fabrikam employees open Contoso’s project portal with their own accounts. Nothing else is configured. Can Contoso employees sign in to Fabrikam’s apps the same way?