These labs cover Entra ID in Microsoft Entra ID. Work through them in the order shown. Each one lists its prerequisites, the PowerShell you will run, and how to check the change worked.
New to the topic? Read the lab prerequisites and IAM Foundations first.
Entra ID Security · Lab 01Identity Risk BaselineProduce a Graph PowerShell baseline covering MFA coverage, privileged roles, dormant accounts and SMS reliance.Intermediate90 minEntra ID Security · Lab 02Move Off SMSPlan and validate a controlled migration from SMS to Microsoft Authenticator without locking anyone out.Intermediate75 minEntra ID Security · Lab 03Conditional Access MFAStage, test in report-only and then enforce MFA policies safely, with break-glass exclusions first.Advanced120 minEntra ID Security · Lab 04FIDO2 and PasswordlessRoll out phishing-resistant authentication methods to your highest-risk directory roles.Advanced120 minEntra ID Security · Lab 05SSPR and Domain RiskProtect the account recovery path and the tenant's domain trust surface with SSPR and domain hygiene.Intermediate90 minEntra ID Security · Lab 06Automated DisablementBuild dry-run-first automation that disables accounts that never registered MFA, with circuit breakers.Advanced120 minEntra ID Security · Lab 07PIM and JIT AccessReplace standing admin rights with role eligibility, approval workflows and time-bound elevation.Advanced110 minEntra ID Security · Lab 08Access ReviewsKeep guest and privileged access accountable through recurring, evidence-producing reviews.Intermediate100 minEntra ID Security · Lab 09Hybrid Identity HardeningProtect the bridge between on-premises Active Directory and Entra ID, the most abused identity path.Advanced120 minEntra ID Security · Lab 10Defender Identity ProtectionConnect Entra risk signals to a repeatable, documented response instead of an inbox full of alerts.Intermediate100 minEntra ID Security · Lab 11PowerShell ReportingTurn one-off assessments into a reusable module and scheduled evidence packs for auditors.Intermediate110 minEntra ID Security · Lab 12Roadmap and Secure ScoreTurn twelve labs of results into a prioritised, board-ready identity security roadmap.Intermediate100 min
About Entra ID labs
How many Entra ID labs are there?
There are 12 Entra ID labs on Identity Bytes Labs, taking about 20.9 hours in total.
Where should I start with Entra ID?
Start with "Identity Risk Baseline". Produce a Graph PowerShell baseline covering MFA coverage, privileged roles, dormant accounts and SMS reliance.
Do I need a production tenant?
No. Every lab is designed for a free, disposable Microsoft Entra test tenant. Never run lab steps against an environment people depend on.