Chapter 3 of 4 · Microsoft SC-300
Plan and Implement Workload Identities
Managed identities and service principals, enterprise apps, app registrations and Defender for Cloud Apps.
- 4topics
- 23 minfast track
- 2diagrams and exhibits
- 20–25%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Managed Identities and Service PrincipalsSC-300 workload identities: managed identities, service principals, system and user assigned identities, federation for AKS and…Diagram6 min
- 2Enterprise Applications and Application ProxySC-300 enterprise apps: SAML single sign on, assignment, app roles, user and admin consent, app collections and Application Proxy…Diagram6 min
- 3App Registrations and PermissionsSC-300 app registrations: account types, redirect URIs, certificates, secrets and federated credentials, delegated and…6 min
- 4Defender for Cloud Apps and App GovernanceSC-300 Defender for Cloud Apps: cloud discovery and the catalog, connected apps, access and session policies, Conditional Access…5 min
About this chapter
What this chapter covers
Applications and Azure resources need identities too. This chapter covers how software signs in without a person: managed identities and service principals, how you integrate applications with Microsoft Entra as enterprise applications, how developers register their own apps and permissions, and how you watch and control app access with Microsoft Defender for Cloud Apps.
It is worth 20 to 25 percent of the exam. The questions are scenarios about a failing sign in, a missing permission or a consent setting.
How the topics fit together
- Managed identities and service principals covers choosing the right identity for a workload and using it to reach Azure resources.
- Enterprise applications and Application Proxy covers single sign on, assignment, consent and publishing on premises apps.
- App registrations and permissions covers registering an app, credentials, API permissions and app roles.
- Defender for Cloud Apps and app governance covers cloud discovery, connected apps, policies and OAuth apps.
An app registration is the definition of an application. An enterprise application, which is a service principal, is its instance in a tenant. Many questions depend on knowing which object to change.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with examples and tables.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Microsoft SC-300 question bank has 650 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.