1. First Principles of Identity and Access Management

Before touching a single Entra blade, you need four foundations: why identity became the security perimeter, where identities live (tenants and directories), the difference between proving who you are and deciding what you can do, and how tokens carry both facts between systems. Every SC-300 topic — Conditional Access, PIM, consent, hybrid sync — is a variation on these four ideas. Master them here and the rest of the guide becomes recognition rather than memorization.