Microsoft Identity Masterclass with John Craddock

Microsoft Identity Masterclass with John Craddock

In my roughly 20+ years in the IT industry, this was by far the best class I have taken. The level of detail on everything was fantastic, and all of the material being kept up to date to even include recent preview features was greatly appreciated. The labs were all set up in a way that you were given enough information to succeed, but you had to actively engage to complete them. This by far helps with retention in learning new information. Not only did the class meet my expectations in content provided, it far exceeded it.

Steve, Senior Server Engineer, US

Live Instructor-Led Course

Attend from anywhere via Zoom

£3635 / $4995 / €4250

plus VAT if applicable

Course code: A639

Available as a public and private course via Zoom



Are you interested in booking a private John Craddock Identity Masterclass for your team via Zoom? Would you like to be the first to hear about new dates for public courses via Zoom? Please contact us or complete this short form.

Learn everything you need to know to integrate applications into Microsoft cloud and on-premises environments using modern and legacy authentication methods.

Who is John Craddock’s Microsoft Identity Masterclass for?

The 5-day Microsoft Identity Masterclass is primarily for IT professionals. Application developers who are tasked with integrating authentication and authorization with Microsoft Azure AD and/or on-premises AD will significantly benefit. Code development is not included in the class, but you will learn about all of the configuration requirements. The Masterclass is designed to teach you how to solve all the challenging aspects of securing apps in Azure AD and providing an optimal SSO experience for your users. It takes place remotely via Zoom. Read what students say about this course.

What will I learn?

You will discover how identity solutions offered by Azure Active Directory and on-premises AD will help you build identity systems for the future using protocols that include OpenID Connect and OAuth 2.0. You will learn how to authenticate and provide authorization factors to applications that can be located on-premises or in the cloud. The source of identity of the users could be from you own corporate network, your Azure AD domain, a partner organization and/or a social identity provider such as Facebook or Google.

The class provides detailed learning through the extensive use of hands-on labs. Attendees will not only learn the fundamentals and principles, but also learn how-to deploy and troubleshoot the solutions. In-depth learning will be gained through the use tools, such as Fiddler, to analyse and understand the protocol flows.

About John Craddock’s Microsoft Identity Masterclass

John Craddock’s “awesome” Microsoft Identity Masterclass is a high-energy, action-packed deep dive into Microsoft Azure AD, crammed with solid information and tips. John will help build your knowledge and consolidate your new skills with 37 hands-on labs.

To attend the Masterclass, you need to be a confident IT administrator with a thirst for knowledge. The Masterclass doesn’t teach basic Azure AD administration, but because of the hands-on nature of the training, you can come to this class with no prior knowledge of Azure AD. You will pick up the basics as we focus on the more challenging topics.

Pre-requisites

To gain the maximum from the Masterclass, you will need hands-on system administrator’s skills. For example, you will need to know how to:

  • Create and manage groups, OUs and group policies in an on-premises AD
  • Perform basic server/DC troubleshooting (for example check if a service is running, and restart it)
  • Add a DNS record
  • Add a URL to a browser’s Intranet zone

five star rated technical training from Oxford Computer TrainingSee the course outline tab above for exactly what you’ll learn. See the refunds and cancellation policy for this Masterclass.

Training outcomes

At the end of the course you will:

  • Understand how the identity solutions offered by Azure Active Directory, on-premises AD FS and AD can help you build identity systems for the future using protocols that include OpenID Connect and OAuth 2.0
  • Know how to authenticate and provide authorization factors to applications that can be located on-premises or in the cloud. The source of identity of the users could be from your own corporate network, your Azure AD domain, a partner organization and/or a social identity provider such as Facebook or Google.

Post-course, you’ll have:

  • A pdf of the hands-on manual and slides used during the Masterclass
  • 60 days’ access (from the first day of the Masterclass) to 37 hands-on labs in a cloud-based virtual environment

About John Craddock

John Craddock is a Microsoft MVP (Most Valuable Professional) and has been involved in Microsoft solutions since the early days of Windows and Windows NT. John spoke on Active Directory at the Windows 2000 launch events and has focused on identity solutions since the first release of AD FS for Windows Server 2003.

He is an identity and security architect and has been involved in many IT projects for industry leaders including Microsoft, the UK Government and multi-nationals. He is a well-known international speaker, and has delivered this Masterclass to professionals throughout the world.

Ask us about John Craddock's Identity Masterclass

Live instructor-led training via Zoom.

Day 1

After a comprehensive introduction to today’s identity challenges and solutions, you will learn the details of the authentication protocols. This in-depth coverage of the protocols will allow you to troubleshoot any problems you may encounter when deploying solutions. As we go through the hands-on labs, you will be expected to troubleshoot any issues you may encounter during the Masterclass. Of course, John will be there if you need help.

Day 1 hands-on labs include:

  • Creating an Azure Active Directory
  • Capturing and analysing HTTP/HTTPS sessions using Fiddler
  • Enabling Kerberos on a website
  • Troubleshooting Kerberos network traffic using Wireshark
  • Tracing the WS-federation protocol

Day 2

After completing our investigation of the protocols, you will learn how to configure the Azure Active Directory to meet your requirements. You’ll discover how to manage the Azure AD through the Azure Portal, using PowerShell and the GraphAPIs. After adding custom domains and branding to your Azure AD, you will see how to enhance security and the user experience using self-service password resets, and MFA.

Day 2 hands-on labs include:

  • Investigating OpenID Connect
  • Adding custom domains to Azure AD
  • Managing Azure AD with PowerShell
  • Using Graph Explorer
  • Self-service password resets
  • Enabling Multi-Factor Authentication

Day 3

You will start the day by deploying Azure AD Connect to synchronize on-premises AD users to Azure AD. We will then investigate pass-through authentication and the new SSO capabilities provided by Azure AD Connect. You will learn about the SSO capabilities of Windows 10 when it is joined to Azure AD and how Windows Hello, the authenticator app and FIDO 2 keys can eliminate the need for passwords.

At this stage, you will have created a reliable identity infrastructure, and now it’s time to make applications available to our users.

You will start by deploying a SaaS app to your users; configuring groups, assignments and self-service application management. You will then learn how to register your own applications into Azure AD.

Day 3 hands-on labs include:

  • Installing and configuring synchronization with Azure AD Connect
  • Investigating pass-through authentication and SSO
  • Working with SaaS applications
  • Self-service application management
  • Configuring a WS-Federation App with Azure AD

Day 4

The day starts with configuring an Open ID Connect / OAuth 2.0 app. We then dive deeper into the application model and learning about managing permissions, roles, groups, delegation, APIs and consent. You will discover how to turn your application into a multi-tenant app and make it available to all users from all Azure AD tenants.

Day 4 hands-on labs include:

  • Configuring an Open ID Connect / OAuth 2.0 app with Azure AD
  • Managing permission roles and groups
  • Defining WebAPI permissions
  • Investigating consent
  • Deploying a V2 app and testing consent
  • Multi-tenant applications

Day 5

The day starts with configuring the Azure AD application proxy to publish both claims and Windows auth applications using Kerberos constrained delegation. We will then look at the features offered by on-premises AD FS and how they can integrate with Azure AD. The labs support three optional hands-on with AD FS, however due to time constraints these will need to be done outside of class hours. We will stretch our boundaries and see how Azure AD can open access to consumers (B2C) and businesses (B2B).

Day 5 hands-on labs include:

  • Publishing an applications using the Azure AD Application Proxy
  • Enabling Windows Authentication via Kerberos Constrained Delegation
  • Optional to be done outside class hours
    • Configuring AD FS
    • Enabling Federated SSO
    • Installing and configuring an OpenID Connect app on AD FS
  • Multi-tenant versus federated applications
  • Managing B2B invitations and guest users
  • Taking over an unmanaged tenant

Discover why John Craddock’s Microsoft Identity Masterclass is so highly recommended by students:

To attend the Masterclass, you need to be a confident IT administrator with a thirst for knowledge. The Masterclass doesn’t teach basic Azure AD administration, but because of the extensive hands-on, you can come to this class with no prior knowledge of Azure AD. You will pick up the basics as we focus on the more challenging topics.

To gain the maximum from this class and the hands-on labs, you will need hands-on system administrator’s skills. For example, you will need to know how to:

  • Create and manage groups, OUs and group policies in an on-premises AD

  • Perform basic server/DC troubleshooting (for example check if a service is running, and restart it)

  • Add a DNS record

  • Add an URL to a browser’s Intranet zone

Excellent. This course was a better explanation about identity protocols and standards that I had access to until today. The base used by Microsoft Identity Solutions is so more clear for me now.

The biggest benefit to a private course is to establish a global network of people from the same company who work with the same type of technology.

5
Nilton, Security IT Manager, Brazil
John Craddock's Identity Masterclass - private course, live via Zoom, 2021

Fantastic advanced content with unparalleled depth of explanation. John is very knowledgeable and helpful and is able to explain very complex concepts. Overall, a great experience!

Learning privately and remotely by Zoom was a very positive experience. Being able to see colleagues from around the world was very beneficial. It allowed for much more comfortable environment. It is great to get additional questions and input from colleagues, as this provided a much better real-world perspective for many of the topics discussed.

5
Michael, Security Advisory Group Manager, US
John Craddock's Identity Masterclass - private course, live via Zoom, 2021

This course was excellent, insightful, and a must for any identity professional! John is a fabulous instructor who is well versed in Microsoft Identity and passionate about the subject which he demonstrates in his instruction and preparation of this course.
Additionally the post class materials were an unexpected bonus value to be able to reconstruct the learning experience in our own environments. Thank you! Attending remotely by Zoom was excellent, convenient, comfortable, and cost efficient.

5
Brad, Group Manager, Security Consulting, US
John Craddock's Identity Masterclass - private course, live via Zoom, 2021

Read more reviews