Azure Active Directory – Implementing Secure Cloud Hybrid Identity Training Course (A630)

"There's good courses, there's great courses and then there's OCG's Azure AD course! An excellent course, very useful."

James Cook - attended public class in person, 2017

Live Instructor-Led Course

Join the class in person, or connect to the class in real time over the internet from wherever you are in the world (via Skype).

£1195 / $1675 / €1525

Available as a private course

If you have a team to train, we'll come to you at a location of your choice. Contact us

Who is our Azure Active Directory course for?

Our Azure AD course is designed for IT support staff, IT consultants and architects, pre-sales technical support staff, tech-savvy business decision-makers and department heads who:

  • Need to know how to configure and implement AD Connect and Azure AD Premium for cloud hybrid identity, and manage secure access to data
  • Have some basic understanding of admin tasks such as:
    • creating users in Active Directory
    • using simple commands in a command or PowerShell prompt

Attendees should have some knowledge of Microsoft Active Directory, Exchange, IIS, and SharePoint and a good grasp of general Windows concepts, including authentication and authorization, shares and permissions.

See more customer feedback about our Azure courseThis exceptionally practical training comprises presentations, discussions, demonstrations, and a lot of hands-on exercises.

The hands-on labs – which are crucial to a proper understanding of the topics covered – have been made as realistic as possible. So for example, students will buy a real domain, and fully implement EM+S/O365 with public email, and real certificates for Single Sign-on. Students may keep this sandbox environment for future use.

The labs are complex and reflect issues you will have in the real world – you will have to diagnose and fix some deliberate configuration problems – it’s extremely worthwhile!

“This was, by FAR, the best training I’ve received in years! I loved how ‘lab heavy’ the course was. I learned so much from working through the labs.”

Note that an essential part of the lab environment is that it has a real domain and real certificates and a real Microsoft Azure trial. To facilitate this students will have to provide a credit card. The total cost will not exceed £20/$30, unless you choose to continue to use the environment after the course.

Training outcomes

At the end of the course you’ll be able to:

  • Configure AD Connect and Azure AD Premium to build realistic scenarios
  • Synchronize on premises AD information with (cloud) Azure AD using AD Connect, including users, their passwords, and groups/distribution lists
  • Manage access to applications, services and data using static, dynamic and self-service groups
  • Configure self-service password reset
  • Implement multi-factor authentication to protect key accounts, and step-up authentication for sensitive applications
  • Implement additional Azure AD security features such as identity protection, and information protection

Want to know more about this course? Hugh, our CEO,  talks in more detail about it in this webinar, recorded in November 2015.

Compare the Azure AD course and the Identity Masterclass with John Craddock

What’s the difference between this Azure AD course and the Identity Masterclass?

This Azure AD course is a 3-day foundation course and covers:

  • Extending AD into the cloud
  • Enabling O365, protecting cloud identities and data using identity protection, conditional access and information protection
  • Group management, self-service, and the Myapps portal

The Identity Masterclass dives more deeply into detail over 5 days. We cover:

  • Authentication protocols
  • Azure AD, PowerShell and graph APIs
  • Hybrid considerations including web app proxy, pass-through authentication and AD FS
  • Working with SaaS, WS-federation, OAuth2.0 apps, and claims-aware apps
  • Enabling B2B and B2C

Delegates on this course will learn about the products and their features through lectures, discussion, and hands-on labs. The hands-on labs are crucial to a proper understanding of the topics covered and have been designed to be as realistic as possible. So for example, students will buy a real domain, and fully implement Azure/O365 with public email, and a real certificate for Single Sign-On (SSO).

Trial subscriptions and licenses for AAD, EM+S and O365 are used during the course, with the ‘on premises’ aspect of the environment implemented using Azure VMs within the Azure trial subscription. If delegates wish to keep the environment as their own sandbox for future use (and we think they should!), then the trial subscription can later be made into a Pay As You Go subscription. Students will be expected to provide a credit card to secure a domain, certificates, and trial subscription – but this will only involve minor charges (about $30).

Over three full and busy days students will learn:

  • AADP – what is it, how to get it, scenarios, licensing
  • Obtaining a public domain, setting up Azure AD
  • Creating and managing virtual machines in Azure AD
  • Setting up an O365 tenant and licensing users
  • Requesting, purchasing and implementing certificates
  • Hybrid on-boarding – options for using AD Connect to
  • synchronize AD and Azure AD
  • Company branding of Azure AD
  • Group management
    • Administrating groups
    • Dynamic groups
    • Group self-service, with approvals
    • Controlling application access
    • Controlling licensing
  • Application integration
    • SaaS applications (password vaulting, SSO, SSO with outbound provision, Inbound provisioning)
    • Line of business applications
    • The Azure AD Application proxy
    • Step-up multi-factor authentication (MFA)
  • The integrated user experience
  • AADP advanced reporting
  • Privileged identity management (just in time and just enough
  • administration, and MFA)
  • Self-service password reset
  • Identity Protection
    • Enable Identity Protection
    • Generate risk data
    • Use manual risk mitigation
    • Configure automatic risk mitigation
  • Consideration of various approaches to SSO

This was, by FAR, the best training I’ve received in years! I loved how ‘lab heavy’ the course was. I learned so much from working through the labs. The instructor’s training style was perfect. He didn’t just read from decks, he whiteboarded. he took the time to answer all questions in detail, demonstrating a staggering understanding of the subject matter. He stayed late each and every night working with people that wanted to linger and finish up labs. He was, in short, remarkable. I cannot say enough kind things.

Eowyn C, Senior Messaging Systems Engineer, California, USA
Attended Azure AD private course in the classroom, 2017

The tutor is a nice person to listen to. He has enough knowledge to keep you interested and a clear way of explaining. I attended the class by Skype – it was just like being in the classroom!

Orlando H, Lead Developer, NL
Attended Azure AD class in real time over the internet, 2016

Fantastic! The environment with a small number of trainees was the best experience for the hands-on approach to labs, and an opportunity to ask many questions about real-world implementations and challenges. The instructor was very friendly, informative and approachable to discuss particular issues in your particular live environment. Very informative and very approachable in your learning and the potential implementation challenges you may have.

Mario A, Programme Manager, London, UK
Attended Azure AD course in the classroom, 2016