48 hands-on labs in a deliberate order. Each builds on the last, from what a directory is through to designing identity architecture across clouds. No prior experience assumed at Level 1.
Start with Step 1 See the full pathWork through the levels in order. Each level assumes you finished the one before, so the labs never stop to re-explain something you have already practised.
No prior experience needed. What identity actually is, how directories store it, and how a machine proves who you are.
See the labs ›The protocols every identity role runs on — federation, single sign-on — and your first real work inside Microsoft Entra.
See the labs ›The work an identity engineer is actually paid for: hardening access, governing privilege, and proving it with detection and reporting.
See the labs ›Architecture across regions and clouds, the judgement to review someone else’s design, and the credentials to back it.
See the labs ›No prior experience needed. What identity actually is, how directories store it, and how a machine proves who you are.
The protocols every identity role runs on — federation, single sign-on — and your first real work inside Microsoft Entra.
The work an identity engineer is actually paid for: hardening access, governing privilege, and proving it with detection and reporting.
Architecture across regions and clouds, the judgement to review someone else’s design, and the credentials to back it.
Everything here runs on software you can obtain without a licence. Labs that required licence-only products were removed.
Free, and it provides the Entra features most of the path depends on. Set it up before Level 2.
A virtual machine or spare laptop for the Linux, directory and SSH work in Level 1.
AWS and Google Cloud free tiers cover the cloud IAM labs. Set billing alerts first.
Keep notes. The Level 4 portfolio and interview material builds on what you recorded earlier.