YOUR LEARNING PATH
Know what you’re working towards.
Who is this course for?
Graduates exploring IT security, IT support professionals, and learners interested in identity administration and governance.
Before you begin
Basic computer and IT knowledge is helpful. You can discuss your experience in the demo before choosing a batch.
What you’ll learn to do
- Explain and troubleshoot SAML SSO, OAuth 2.0, OpenID Connect and MFA.
- Work through directory, application and policy scenarios in Entra ID, Okta and PingFederate.
- Design joiner, mover and leaver workflows, provisioning and access reviews.
- Understand SailPoint governance, privileged access controls and Zero Trust principles.
- Investigate sign-in, federation and provisioning failures using logs and a support runbook.
- Document and present an end-to-end IAM implementation for a simulated organisation.
ONE CONNECTED LEARNING JOURNEY
From identity basics to enterprise scenarios.
Understand the concepts, apply them to real-world scenarios, and learn to explain your decisions. The sequence below connects the detailed syllabus to practical outcomes.
Build your foundations
Identities, directories, authentication and least privilege.
Explain who needs access, to what, and why.
Connect applications
SAML, OAuth 2.0, OpenID Connect, Okta and Microsoft Entra ID.
Trace a sign-in and explain the configuration behind it.
Manage the identity lifecycle
Provisioning, SCIM, joiner–mover–leaver processes and access reviews.
Map an employee’s access from onboarding to departure.
Investigate and document
Authentication logs, failed provisioning, support scenarios and a simulated enterprise project.
Present your evidence, resolution and implementation decisions.
Prepare for interviews
Project walkthroughs, technical questions, resume preparation and mock interviews.
Explain your skills and practice work with confidence.
YOUR COURSE, MODULE BY MODULE
Course Content
Explore the topics, practical work and project preparation in each module. Your batch timetable and access to practice tools will be confirmed during the demo.
IAM Fundamentals
Understand how digital identities, permissions and policies work together to protect an organisation.
- Introduction to Cybersecurity and IAM
- What is Identity & Access Management?
- Identity lifecycle
- Authentication vs Authorization
- Identification, Authentication and Accounting
- Users, Groups, Roles and Permissions
- Principle of Least Privilege
- Need-to-Know and Separation of Duties
- RBAC, ABAC and Policy-Based Access
- IAM architecture and components
- Workforce IAM vs Customer IAM
- Cloud IAM vs On-Premises IAM
Suggested practiceCreate a role-to-access matrix for a sample organisation.
Learning outcomeExplain authentication, authorisation and least privilege.
Enterprise Directory Services
Learn how enterprise directories organise identities and support on-premises, cloud and hybrid environments.
- Directory services fundamentals
- Active Directory concepts
- Domains, Forests and Organizational Units
- Users and Groups
- Group Policies – overview
- LDAP and LDAPS
- Distinguished Names and directory structure
- Microsoft Entra ID fundamentals
- On-premises AD vs Entra ID
- Hybrid identity concepts
- Identity synchronization concepts
Suggested practiceSketch a directory structure with users, groups and a hybrid identity flow.
Learning outcomeExplain how directories organise and synchronise identities.
Authentication Technologies
Compare authentication methods and understand how stronger sign-in controls protect user accounts.
- Password-based authentication
- Passwordless authentication
- Multi-Factor Authentication (MFA)
- One-Time Passwords
- Push authentication
- Biometrics overview
- Security keys / FIDO2
- Windows Hello for Business concepts
- Risk-based authentication
- Adaptive authentication
- Authentication assurance and session management
Suggested practiceCompare MFA and passwordless options for a sample workforce.
Learning outcomeChoose controls based on the user and sign-in scenario.
SSO & Federation
Follow a single sign-on request between an identity provider and an application, then investigate federation failures.
- Single Sign-On fundamentals
- Federation concepts
- Identity Provider (IdP)
- Service Provider (SP)
- SAML 2.0 architecture
- SAML assertions
- SAML authentication flow
- Metadata and certificates
- SP-initiated vs IdP-initiated SSO
- Federation troubleshooting
- Common SAML errors and resolution
Suggested practiceTrace a sample SAML exchange and identify issuer, audience, recipient and certificate checks.
Learning outcomeExplain an SSO flow and investigate a failed assertion.
OAuth 2.0 & OpenID Connect
Understand delegated authorisation and modern sign-in flows, including token purpose, validation and troubleshooting.
- OAuth 2.0 fundamentals
- OAuth roles
- Access and refresh tokens
- Authorization Code Flow
- Authorization Code + PKCE
- Client Credentials Flow
- OpenID Connect fundamentals
- ID Token vs Access Token
- JWT structure
- Scopes and claims
- OAuth/OIDC security considerations
- Troubleshooting token-based authentication
Suggested practiceWalk through an authorisation-code flow with PKCE and inspect sample token claims.
Learning outcomeDistinguish authentication from delegated API access.
Microsoft Entra ID
Explore Microsoft Entra ID administration, application integration, conditional access and identity monitoring.
- Entra ID architecture
- Users and groups
- Administrative roles
- Enterprise applications
- Application registrations
- SSO configuration
- MFA configuration
- Conditional Access
- Identity Protection concepts
- Privileged Identity Management overview
- External identities / B2B
- Hybrid identity concepts
- Entra Connect overview
- Monitoring, sign-in logs and audit logs
- Troubleshooting real-world SSO scenarios
Suggested practicePlan an enterprise application integration and review a sample Conditional Access sign-in result.
Learning outcomeRelate application settings and access policies to sign-in evidence.
Okta Identity Management
Work through Okta directory, application, authentication and lifecycle management scenarios.
- Okta architecture
- Universal Directory
- Users and groups
- Group rules
- Application integration
- SAML application configuration
- OIDC application integration
- MFA and authentication policies
- Okta Verify
- Lifecycle Management concepts
- Provisioning and deprovisioning
- Active Directory integration
- System Log
- SSO troubleshooting
- Real-time enterprise scenarios
Suggested practiceMap users and groups to an application and investigate a sample System Log event.
Learning outcomeExplain application assignment, MFA and lifecycle behaviour.
PingFederate
Explore federation connections, adapters, policies and certificate management in PingFederate.
- Ping Identity ecosystem overview
- PingFederate architecture
- Administrative console
- IdP and SP concepts
- Adapter configuration
- IdP connections
- SP connections
- SAML federation
- OAuth/OIDC concepts in PingFederate
- Authentication policies
- Certificates and signing
- Attribute mapping
- Troubleshooting federation issues
- Enterprise SSO implementation scenarios
Suggested practiceDiagram an IdP-to-SP connection, including attributes and certificate responsibilities.
Learning outcomeExplain the components of an enterprise federation connection.
Identity Governance & Administration (IGA)
Connect access decisions to business roles, approvals, periodic reviews and audit evidence.
- Introduction to Identity Governance
- IAM vs IGA
- Identity lifecycle governance
- Joiner–Mover–Leaver process
- Birthright access
- Role-based provisioning
- Access requests
- Approval workflows
- Access certification
- Periodic access reviews
- Segregation of Duties
- Orphan and dormant accounts
- Compliance and audit requirements
Suggested practiceDesign an access request, approval and periodic review for a sample role.
Learning outcomeConnect access decisions with governance and audit evidence.
SailPoint
Explore SailPoint identity governance workflows. Product terminology and configuration differ between IdentityIQ and Identity Security Cloud.
- SailPoint architecture and concepts
- Identity cubes / identity profiles concepts
- Sources and applications
- Account aggregation
- Identity correlation
- Provisioning concepts
- Access requests
- Roles and entitlements
- Lifecycle management
- Joiner–Mover–Leaver scenarios
- Certification campaigns
- Access reviews
- Policies and SoD
- Reporting and auditing
- Troubleshooting common SailPoint scenarios
Suggested practiceMap source accounts to identities and outline an access certification scenario.
Learning outcomeExplain aggregation, correlation and access-review concepts.
Provisioning & Lifecycle Management
Follow an employee from onboarding through role changes to departure, including automated provisioning and failure handling.
- User onboarding
- Account creation
- Access modification
- Transfers and department changes
- Termination process
- Automated provisioning
- Deprovisioning
- SCIM fundamentals
- API-based provisioning
- Directory-based provisioning
- HR-driven identity lifecycle
- ServiceNow integration concepts
- Handling failed provisioning transactions
Suggested practiceDesign a joiner–mover–leaver workflow, including failed provisioning and access removal.
Learning outcomeExplain lifecycle triggers, attribute ownership and failure handling.
Privileged Access Management (PAM)
Understand how privileged credentials and sessions are controlled, monitored and integrated with wider identity policies.
- PAM fundamentals
- Privileged accounts
- Administrative accounts
- Service accounts
- Shared accounts
- Credential vaulting
- Password rotation
- Just-in-Time access
- Just-Enough Administration
- Privileged session monitoring
- CyberArk concepts
- Entra Privileged Identity Management
- PAM integration with IAM
Suggested practiceCreate a privileged-account control plan covering approval, rotation and monitoring.
Learning outcomeDistinguish privileged access controls from everyday user access.
Zero Trust & AI-Driven Identity Security
Explore how identity signals, device context and risk inform access decisions within a Zero Trust approach.
- Zero Trust fundamentals
- "Never trust, always verify"
- Identity as the new security perimeter
- Continuous authentication
- Conditional and contextual access
- Device trust
- User and Entity Behavior Analytics concepts
- Risk-based access decisions
- Identity threat detection
- AI/ML applications in identity security
- Automated risk response
- Zero Trust IAM architecture
Suggested practiceEvaluate sample user, device and risk signals for an access decision.
Learning outcomeExplain how context informs an identity security policy.
IAM Security & Compliance
Relate common identity risks to security controls, monitoring and compliance evidence.
- Identity security risks
- Credential attacks
- Phishing and MFA-related attack concepts
- Excessive privileges
- Dormant accounts
- Privilege escalation
- Identity threat detection
- Security logging and monitoring
- Access reviews
- Audit readiness
- GDPR overview
- ISO 27001 IAM controls
- SOC 2 concepts
- PCI DSS identity/access requirements
Suggested practicePrepare an evidence checklist for a sample access review.
Learning outcomeConnect identity risks with controls and supporting records.
IAM Operations & Troubleshooting
Use a structured support process to diagnose access issues, communicate progress and document the root cause.
- IAM production support model
- Incident vs Service Request vs Change
- SSO troubleshooting methodology
- SAML troubleshooting
- OAuth/OIDC troubleshooting
- MFA troubleshooting
- Account provisioning failures
- Access-related incidents
- Certificate expiry issues
- Authentication logs
- Audit and sign-in logs
- Browser developer tools basics
- Working with ServiceNow tickets
- SLA and escalation management
- Root Cause Analysis
Suggested practiceWrite a support runbook for an SSO failure, including evidence, escalation and root cause.
Learning outcomeCommunicate a structured investigation and resolution.
Hands-On Labs
Apply the concepts in guided lab environments and collect evidence of your configuration and troubleshooting work.
- Create users, groups and roles
- Configure MFA
- Create Conditional Access policies
- Integrate a SAML application
- Configure OIDC authentication
- Configure an application in Okta
- Configure SSO with Microsoft Entra ID
- Analyze SAML assertions
- Decode and analyze JWTs
- Troubleshoot failed SSO
- Create lifecycle workflows
- Perform access review scenarios
- Investigate authentication logs
Suggested practiceCollect configuration notes and troubleshooting evidence from the guided exercises.
Learning outcomeDemonstrate and explain the work completed in your practice environment.
Real-Time Enterprise Project
Bring the modules together in a simulated enterprise implementation, from architecture through monitoring and documentation.
- Project: End-to-End IAM Implementation
- Design IAM architecture
- Integrate Active Directory/Entra ID
- Establish identity lifecycle processes
- Implement SSO
- Configure MFA
- Integrate enterprise applications
- Implement automated provisioning
- Establish Joiner–Mover–Leaver workflows
- Design access reviews
- Implement privileged-access controls
- Apply Zero Trust principles
- Monitor and troubleshoot IAM incidents
- Prepare IAM implementation documentation
Suggested practiceAssemble an architecture diagram, access matrix, lifecycle workflow and troubleshooting runbook.
Learning outcomePresent a simulated end-to-end IAM implementation.
Interview & Career Preparation
Prepare to explain your IAM knowledge, practical work and troubleshooting approach in interviews.
- IAM interview questions
- Entra ID interview scenarios
- Okta interview scenarios
- SailPoint interview scenarios
- PingFederate interview scenarios
- SAML/OAuth/OIDC troubleshooting questions
- Production-support scenarios
- Resume preparation
- Mock interviews
- Project explanation preparation
- L1/L2/L3 support scenarios
- IAM Engineer / IAM Consultant career roadmap
Suggested practicePrepare a project walkthrough and practise answering scenario-based interview questions.
Learning outcomeDescribe your own work clearly and accurately.
Looking for the IAM demo? See the focused IAM pathway
PUT IT INTO PRACTICE
Build something you can explain.
Build a simulated enterprise IAM implementation: design the architecture, connect directory and application identities, establish SSO and MFA, plan automated provisioning and access reviews, apply privileged-access controls, and prepare monitoring, troubleshooting and implementation documentation.
YOUR COURSE TRAINER
Learn with guidance, practise with confidence.
Identity & Access Management (IAM) trainer
IRA Intellix Academy · Live, instructor-led training
10+ years of experience across MNCsLearn from a trainer with over 10 years of professional experience across multinational companies (MNCs). Work through concepts, ask questions and practise with the trainer assigned to your batch, following the Identity & Access Management (IAM) syllabus and practical work.
Course focus
- Explain and troubleshoot SAML SSO, OAuth 2.0, OpenID Connect and MFA.
- Work through directory, application and policy scenarios in Entra ID, Okta and PingFederate.
- Design joiner, mover and leaver workflows, provisioning and access reviews.
Discuss with your trainer
- Your starting level and the concepts you need help with.
- How to approach the course exercises and practical project.
- Questions from live sessions and your next practice steps.
Ask admissions about your batch trainer, teaching approach and session timings before enrolling.
Book a trainer-led demoPREVIEW THE SUBJECT
Watch the recorded demo.
A 10-minute introduction with a practical example. Book a live demo below to discuss your questions and the course in more detail.
KNOW WHAT YOU WILL PRACTISE
A clear scope for every learning environment.
Okta & Microsoft Entra ID
Work through identity administration, SSO, MFA, provisioning and log investigation using the environments available to your batch.
Federation, governance & privileged access
Explore the published PingFederate, SailPoint and PAM topics. Product-specific lab availability and depth are confirmed with your trainer.
Before you enrol, confirm your practice access.
Ask which products and editions are available, whether access is individual or trainer-led, how long it lasts, and whether any licence or external exam costs apply.
Discuss practice access in your free demoYOUR LEARNING HUB
Keep your learning in one place.
After registration and academy approval, open your assigned course and follow the learning resources published for your batch.
Course lessons
Follow published lessons and revisit learning material.
Classes & recordings
Find scheduled sessions and available course recordings.
Practice & assessments
Work through the activities and assessments assigned to your course.
Recording availability and access duration depend on your batch arrangements. Confirm these details with admissions.
Open Learning HubTURN PRACTICE INTO A CLEAR STORY
Prepare to explain your IAM skills.
Project walkthrough
Explain your architecture, integration choices and troubleshooting evidence from the simulated enterprise project.
Interview practice
Prepare for technical and scenario-based discussions. Ask which mock interview rounds and feedback sessions the programme includes.
Career profile
Discuss resume and LinkedIn support, and guidance for presenting your skills on job portals such as Naukri.
Confirm the included career support with admissions. Training does not guarantee a job, interview or salary.
BEFORE YOU ENROL
Your questions, answered.
Which IAM tools does the programme cover?
Okta and Microsoft Entra ID are central to the application and identity scenarios. The syllabus also covers PingFederate, SailPoint, governance and privileged-access concepts. Confirm the practical depth and available environments for each product with your batch trainer.
Do I receive my own practice tenant?
Tenant ownership, product editions, access duration and any licence costs depend on the available batch arrangements. Ask admissions for these details before enrolling.
Does the course include a vendor certification exam?
Confirm the academy completion-certificate requirements with admissions. Vendor certifications and exam fees are separate unless explicitly included in your written package details.
Can I join as a beginner?
Basic computer and IT knowledge is helpful. You can discuss your experience in the demo before choosing a batch. The free demo is a chance to discuss the best starting point for you.
How long does the course take?
The course runs for 8 weeks with approximately 60 hours of training. Total hours may vary depending on the depth of concept explanations. Your batch timetable will be shared by the academy.
What is included in the offer?
The current IAM offer is ₹35,000 against an MRP of ₹75,000. Ask admissions for the programme inclusions, practice access and career support details before enrolling. Confirm applicable taxes and any external exam or tool costs.
When will I receive my demo joining details?
After you submit the form, you will receive a request reference on this page. Our team will contact you with the timing and joining details. An alternative timing is a request until confirmed.
When do I get Learning Hub access?
After registration, an academy administrator approves access to your course. Confirm the access period and recording availability with the team.
Is a job guaranteed?
No job or salary is guaranteed. Ask which resume, interview and career preparation services are included in your programme.