SC-300 case studies
SC-300 · Put your knowledge to work in context.
Microsoft Certified: Identity and Access Administrator Associate is an intermediate-level Microsoft certification aimed at security engineers who design, implement, and operate identity and access management with Microsoft Entra. The role covers configuring and managing identities across their lifecycles for users, devices, Azure resources, and applications, applying Zero Trust principles, delivering self-service experiences, and handling troubleshooting, monitoring, and reporting. The SC-300 case studies are 5 cases and about 4,221 words.
1Fabrikam: A Dynamic Group That Is 340 Members Short
Fabrikam has 12,000 employees across three on-premises Active Directory forests. Two forests sync to Microsoft Entra ID through Entra Connect cloud sync; the third, acquired nine months ago, still uses a legacy directory sync server that fails weekly.
863 words, about 4 min2Northwind: Legacy Auth Block, Break-Glass Accounts, and a 30-Day Admin MFA Deadline
Northwind has 6,500 users. Everyone holds Microsoft Entra ID P1; only 400 P2 licenses exist, held by IT and finance approvers.
829 words, about 4 min3Tailspin: 38 Client Secrets, a GitHub Pipeline, and Sign-Ins from 12 Countries
Tailspin operates a multi-tenant SaaS product on Azure. The tenant holds 140 app registrations; 38 authenticate with client secrets, and 11 expired in the last quarter, causing three production outages.
853 words, about 4 min4Litware: 6,800 Guests, a Silent Access Review, and 500 Governance Licenses
Litware has 4,200 employees and 6,800 guest accounts from 60 partner organizations. Business units grant access by sharing SharePoint sites directly with named individuals.
825 words, about 4 min5Adatum: Double MFA Prompts, Unverified Guests, and a 15-Minute Revocation Clause
Adatum collaborates with 30 partner tenants. Guests redeem invitations either with a work account from the partner or with a personal Microsoft account, and 40 percent of guest objects show an unverified personal email address, which the auditor flagged as an identity-assurance gap.
851 words, about 4 min