52%

52.2% of intrusions using valid accounts went on to steal more credentials. Microsoft Digital Defense Report 2026.

Microsoft Certified: Identity and Access Administrator Associate (SC-300) certification

One Stolen Login Leads to More.

More than half of intrusions with a valid account went on to steal more credentials. SC-300 proves you can lock down identity in Microsoft Entra, from MFA and Conditional Access to privileged access.

HRD Corp claimableYayasan Peneraju: may be eligibleKL or online

Exam

SC-300

Course

4 days

Course fee

RM3,000

With exam

RM3,374

Next intake

1 Dec 2026

Quick answer

What is Microsoft Certified: Identity and Access Administrator Associate?

Microsoft Certified: Identity and Access Administrator Associate validates that you can design, run and secure identity with Microsoft Entra: user and hybrid identities, authentication and Conditional Access, workload identities and apps, and identity governance. One 100-minute exam, SC-300, earns it.

Exam facts verified against learn.microsoft.com on 23 Oct 2026

FOR

Identity, Microsoft 365 and Azure administrators

ROLES

Identity and access administrator, IAM engineer, Entra administrator

SKIP IF

Microsoft identity is new to you. Start with SC-900

01

The Credential

What you study, practise and sit to earn it.

Pass one exam, SC-300, and you hold Microsoft Certified: Identity and Access Administrator Associate. Identity is where most intrusions start, and where Microsoft says defence now begins.

COURSE

4 days, SC-300T00

HANDS-ON

Microsoft Official Course labs

EXAM

SC-300, 100 min

CREDENTIAL

Microsoft Certified Associate

Awarded by

Microsoft

Level

Intermediate, associate

Prerequisites

None formal

Recommended

Azure, Microsoft 365, AD DS, PowerShell and KQL

Validity

12 months, renew free online

Covers

Microsoft Entra, Conditional Access, PIM, Global Secure Access

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

Run identity and access with Microsoft Entra

→

SC-300

Users, authentication, apps and governance

Investigate and respond to threats

→

SC-200

Security operations with Defender XDR and Sentinel

Secure Azure, data and AI workloads

→

SC-500

Microsoft’s cloud and AI security engineering credential

Protect sensitive data in Microsoft 365

→

SC-401

Microsoft Purview information protection and DLP

No formal prerequisites. But are you ready?
0/4

Tick what applies. 3 or 4: you are ready for this course. Fewer: start with SC-900.

03

What the Exam Covers

Skills measured for exam SC-300. Bars to scale.

4 skill areasLargest: Authentication and Access, 25 to 30%

Implement Authentication and Access Management · 25–30%
Implement and Manage User Identities · 20–25%
Plan and Implement Workload Identities · 20–25%
Plan and Automate Identity Governance · 20–25%

Source: Microsoft Learn SC-300 study guide. Microsoft publishes weightings as ranges; bars show the midpoint.

04

What the Course Covers

Microsoft Official Course SC-300T00 in four themes.

Four days of Microsoft Official Course training. You build the identity foundation in Microsoft Entra ID, lock down sign-in, connect apps, then govern who keeps access.

4 modules

User and Hybrid Identities

  • Initial configuration of Microsoft Entra ID
  • Create, configure and manage identities
  • External identities
  • Hybrid identity

4 modules

Authentication and Access

  • Multi-factor authentication and user authentication
  • Plan, implement and administer Conditional Access
  • Microsoft Entra ID Protection
  • Access management for Azure resources

3 modules

Apps and Workload Identities

  • Plan and integrate enterprise apps for single sign-on
  • Monitor enterprise app integration
  • Implement app registration

4 modules

Identity Governance

  • Entitlement management
  • Access reviews
  • Privileged access
  • Monitor and maintain Microsoft Entra ID

Labs

in Microsoft Entra, with PowerShell and the CLI, alongside instructor-led sessions.

05

Why Now

How identity attacks spread, how often, and why train with us.

52.2%

of intrusions using valid accounts involved follow-on credential theft

Microsoft Digital Defense Report 2026

31M

identity risk detections Microsoft analyses on an average day

Microsoft Digital Defense Report 2026

78%

of observed attack techniques against critical infrastructure used cloud identity abuse

Microsoft Digital Defense Report 2026

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Most of those incidents start with a compromised identity.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

Microsoft Solutions Partner, Training Services

Delivering the Microsoft Official Course SC-300T00

Exam add-on

Add your exam for RM374

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Four-day courseRM3,000

Exam add-on (SC-300)RM374

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM3,374

RM3,000 + RM374

Dates

Where

Fee

1 to 4 Dec 2026

Kuala Lumpur or online

RM3,000 / RM3,374 with exam

12 to 15 Jan 2027

Kuala Lumpur or online

RM3,000 / RM3,374 with exam

1 to 4 Apr 2027

Kuala Lumpur or online

RM3,000 / RM3,374 with exam

3 to 6 Jun 2027

Kuala Lumpur or online

RM3,000 / RM3,374 with exam

27 to 30 Jul 2027

Kuala Lumpur or online

RM3,000 / RM3,374 with exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

Microsoft Certified: Identity and Access Administrator Associate

Exam

SC-300

Duration

100 minutes, proctored

Passing score

700 or greater

Languages

English, Japanese, Chinese, Korean, German, French, Italian, Portuguese (Brazil), Spanish

Scheduling

Through Pearson VUE

Retakes

After 24 hours for a second attempt

Exam add-on

RM374 through Trainocate

EVERY 12 MONTHS

Renew free online

Microsoft associate certifications expire after a year. Renew at no cost by passing an online assessment on Microsoft Learn.

STAY CURRENT

Learn what changed

The renewal assessment covers the latest product updates, so your skills stay in step with Microsoft security.

FAQ

Questions People Ask

SC-300, Microsoft Identity and Access Administrator, is the exam for Microsoft Certified: Identity and Access Administrator Associate. It covers user identities, authentication and access management, workload identities and identity governance in Microsoft Entra.
Microsoft updated the skills measured on 28 Oct 2026, with minor changes to user authentication, Global Secure Access and privileged access. The four skill areas and their weightings stay the same.
At Trainocate Malaysia the four-day SC-300T00 course is RM3,000 per person, or RM3,374 with the exam. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.
A proctored 100-minute exam, scheduled through Pearson VUE. You need 700 or more to pass. If you fail, you can retake it after 24 hours.
Yes. Microsoft renamed Azure Active Directory to Microsoft Entra ID. The SC-300 exam and course use the Microsoft Entra names.
Administrators who manage identities and access in Microsoft 365 and Azure, and security engineers who own sign-in, Conditional Access and identity governance.
The certification is valid for 12 months. Renew it free by passing an online assessment on Microsoft Learn.

Own Identity Security

Pick an intake. An advisor confirms fees, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 1 to 4 Dec 2026
  • RM3,000, or RM3,374 with exam

Sources