✓ Live now — Azure 5 hands-on projects

SC-300 Hands-On Labs
Real Entra ID. Real GitHub portfolio.

Five real Identity and Access Administrator projects mapped directly to the SC-300 exam objectives. Mark a step complete and HandsOnCert commits the evidence — Conditional Access policies, RBAC assignments, governance configs — straight to your own GitHub repo. The portfolio employers actually click into.

$49 one-time · Project 1 free · No subscription

5
Hands-on projects
10h
Estimated time
$165
SC-300 exam cost
$49
HandsOnCert price

What you'll build

Every project maps to an official SC-300 exam domain. Each one ends with evidence committed to your GitHub repo automatically.

1

Implement Identities in Microsoft Entra ID — Free

Create users, groups, and administrative units in Microsoft Entra ID. Configure dynamic group membership rules and bulk operations. Commit your identity configuration screenshots and group rule definitions.

Implement Identities — 25-30% of exam
2

Implement Authentication and Access Management

Configure Multi-Factor Authentication, set up a Conditional Access policy requiring MFA for risky sign-ins, and configure self-service password reset. Commit your authentication policy configurations and test sign-in evidence.

Authentication & Access — 25-30% of exam
3

Implement Access Management for Apps

Register an enterprise application in Entra ID, configure SSO, and assign app roles to users and groups. Configure consent settings for the application. Commit your app registration configuration and role assignments.

Access Management for Apps — 10-15% of exam
4

Plan and Implement Identity Governance

Set up Privileged Identity Management (PIM) for a role with time-bound eligible assignments, configure an access review for a group, and set up an entitlement management access package. Commit your governance configuration evidence.

Identity Governance — 25-30% of exam
5

Implement Monitoring and Troubleshooting

Review sign-in logs and audit logs for a specific authentication event, configure a sign-in risk alert, and use Identity Protection to investigate a risky user. Commit your monitoring dashboard and investigation evidence.

Monitoring & Troubleshooting — 10-15% of exam

Why HandsOnCert

🗂️

Real GitHub portfolio

Every completed step auto-commits evidence to your own repo. No fake portfolio templates — real configs, real screenshots, real history.

☁️

Real Azure resources

No simulators. You work in the actual Azure console and tools, the same ones you'll use on the job and in the SC-300 exam.

🤖

Cert Buddy AI mentor

Stuck on a step or an exam concept? Cert Buddy is trained on SC-300 objectives and helps you debug and understand — not just copy-paste.

💰

Cost alerts built in

Every chargeable resource has a clear alert telling you exactly when to stop, deallocate, or delete — so a lab break doesn't become a surprise bill.

📄

Downloadable lab guide

Get the full SC-300 lab guide as a PDF — step-by-step instructions, screenshots to capture, and an exam quick-reference section.

💵

One-time price

$49 once. No subscription, no recurring charges. Or get All-Access to all 21 cert paths for $199.

Frequently Asked Questions

Are the SC-300 hands-on labs free?

Project 1 (Implement Identities) is completely free, including unlimited access to Cert Buddy for that project and the manual GitHub commit workflow. The remaining 4 projects unlock for a one-time payment of $49.

Do I need a Microsoft 365 trial for SC-300 labs?

Yes, several SC-300 features (Conditional Access, PIM, Identity Protection) require Entra ID P2, available via a free 30-day Microsoft 365 E5 trial. All labs are designed to complete within the trial period.

How does the GitHub portfolio auto-commit work for SC-300?

When you mark a lab step complete, HandsOnCert commits your configuration screenshots and policy definitions directly to your own GitHub repository via OAuth. Each project gets its own folder with a unique enrollment code.

How long does the SC-300 path take to complete?

The 5 projects take approximately 10 hours total, covering identity management, authentication and access, application access, identity governance, and monitoring — the same domains tested on the SC-300 exam.

Is SC-300 a good pairing with AZ-104?

Yes. SC-300 (Identity and Access Administrator) specializes in Microsoft Entra ID, while AZ-104 (Azure Administrator) covers broader infrastructure administration including a portion of identity. They pair well for administrators whose roles involve both infrastructure and identity governance.

Is SC-300 the same as SC-900?

No. SC-900 (Security, Compliance, and Identity Fundamentals) is an entry-level conceptual exam with no prerequisites. SC-300 (Identity and Access Administrator) is an associate-level exam requiring hands-on configuration of Entra ID identity solutions. SC-900 is a good starting point before SC-300.

Build your SC-300 portfolio today

Start Project 1 free — no credit card required. See exactly how the GitHub auto-commit works before you pay anything.

Start Free →