In this advanced-level course, you will learn to design robust Identity and Access Management (IAM) architectures that support the modern enterprise. You'll move beyond traditional models to implement Zero Trust principles, ensuring rigorous verification for every access request. You'll define and deploy advanced RBAC and ABAC models to enforce least privilege, architect secure passwordless MFA solutions using FIDO2 standards, and integrate Microsoft Defender suites to provide unified visibility and threat protection across your environment. You'll also perform organization-wide Zero Trust maturity assessments to identify critical gaps and execute a roadmap for a resilient, identity-centric security posture.

This course is for security professionals with foundational knowledge of networking concepts, basic authentication protocols, and experience with enterprise directory services or cloud identity management. By the end of this course, you will be able to design Zero Trust IAM architectures for the modern enterprise, define and deploy advanced RBAC and ABAC models to enforce least privilege, architect passwordless MFA solutions using FIDO2 standards, and integrate Microsoft Defender suites for unified visibility and threat protection. This course works with Microsoft Entra ID. Advanced capabilities—including Conditional Access, access reviews, and entitlement management—are part of Microsoft Entra ID Governance and require a paid license.