Microsoft Identity and Access Administrator Associate
The SC-300 exam is designed for professionals who implement and configure Security. It validates your ability to implement and manage user identities, implement authentication and access management, plan and implement workload identities, and plan and automate identity governance.
Exam details
- Certification
- Microsoft Identity and Access Administrator Associate
- Exam code
- SC-300
- Level
- Associate
- Duration
- Approximately 100 minutes
- Questions
- Typically 40–60 questions
- Passing score
- 700 out of 1000
- Cost
- USD $165 — typical price; the exact fee varies by country/region and currency, and local taxes may apply.
- Prerequisites
- None required
- Languages
- English (also available in German, Spanish, French and Japanese, and several other languages)
- Delivered by
- Pearson VUE
- Renewal
- Free online assessment, every 12 months
Skills measured
Implement and manage user identities (20–25%)
- Configure the Entra tenant, roles, administrative units, domains, and branding.
- Create users, groups, devices, licences, and external or cross-tenant identities.
- Implement hybrid identity with Cloud Sync, password hash sync, PTA, seamless SSO, and Connect Health.
Implement authentication and access management (25–30%)
- Plan MFA, passkeys, SSPR, Windows Hello, password protection, and session revocation.
- Implement Conditional Access, continuous access evaluation, and Global Secure Access.
- Manage user, sign-in, and workload identity risk with Entra ID Protection.
Plan and implement workload identities (20–25%)
- Create and assign managed identities and service principals for Azure workloads.
- Integrate enterprise apps, Application Proxy, consent, and app registrations.
- Monitor app access with Defender for Cloud Apps discovery, session policies, and OAuth apps.
Plan and automate identity governance (20–25%)
- Implement entitlement management, access packages, terms of use, and connected organisations.
- Plan access reviews and Privileged Identity Management for roles, resources, and groups.
- Monitor sign-in, audit, and provisioning logs with workbooks, KQL, and Identity Secure Score.
Study resources & practice tests
Disclosure: some links below are affiliate links. If you buy through them we may earn a commission, at no extra cost to you. Read our affiliate disclosure.
Frequently asked questions
Who should take SC-300?
SC-300 is for identity and access administrators, IAM engineers, and Entra ID specialists. Most work in corporate identity teams, at managed service providers, or at Microsoft partners, in finance, government, and professional services.
What is the average salary for an Identity and Access Administrator?
As of August 2026, SalaryExpert reports an average US identity and access control administrator salary of about $82,000. Mid-level IAM engineers in major US metros are often higher, around $140,000 in specialist 2026 IAM surveys. In the United Kingdom, Barclay Simpson places IAM engineers around £75,000 to £90,000 UK-wide and IAM analysts around £45,000 to £75,000. In the EU, 2026 IAM engineer mid-points are around €85,000. There is no single published EMEA average.
Where do I find exam questions to practice?
You will find websites selling exam dumps or brain dumps that claim to be real SC-300 questions. Those materials are not official. Microsoft treats using brain dumps as cheating. It can invalidate your score, revoke certifications you already hold, and ban you from future exams. Microsoft publishes a free Practice Assessment for SC-300 on Microsoft Learn. Those questions are examples only, not the live exam. MeasureUp also sells the official practice test linked in the study resources on this page. You can try the Microsoft exam sandbox to see the question types and timer, but it does not use real exam questions. Practise the skills measured in a real product environment rather than memorising leaked items.
Does the exam include official labs I can use to practice?
Microsoft does not publish a stable list of which certification exams include labs, and a lab can be dropped for a candidate if the live environment is unavailable. Role-based Azure and security exams such as SC-300 may include performance-based labs in a live cloud environment. You only find out at the start of your sitting. For practice, Microsoft Learn modules for this exam often include a free Azure sandbox, and official instructor-led SC-300T00 training delivered by a Microsoft Learning Partner includes labs. Those labs are for the course, not a copy of the exam. Applied Skills assessment labs are a separate Microsoft credential, not SC-300 exam labs. The Microsoft exam sandbox shows traditional question types only. It does not give you the lab virtual machine.