CertifyDeckMicrosoft has published the version of the SC-300 (Microsoft Identity and Access Administrator) outline that takes effect on 28 October 2026. The official change log calls it a minor update: three areas are adjusted and the rest stay the same. This article explains which areas they are, how the exam is structured and what to do depending on your exam date.
What the official change log says
The SC-300 study guide includes a table comparing the previous outline with the one in force from 28 October 2026. It marks three areas as minor changes: plan, implement and manage Microsoft Entra user authentication; implement Global Secure Access; and plan and implement privileged access. For the audience profile and every other area it states no change.
Microsoft does not describe what each minor change consists of, so we do not make it up. What you can do is read the objectives of those three areas in the new version carefully, which is what we summarize next.
The three areas that change
User authentication. The new version lists eight objectives: plan for authentication; authentication methods (certificate-based authentication, Temporary Access Pass, Microsoft Authenticator and FIDO2 passkeys); tenant-wide MFA settings; self-service password reset; Windows Hello for Business; disabling accounts and revoking sessions; Microsoft Entra password protection; and Microsoft Entra Kerberos authentication for hybrid identities.
Global Secure Access. Four objectives: deploy the Global Secure Access clients, and deploy and manage Microsoft Entra Private Access, Microsoft Entra Internet Access and the Microsoft traffic profile for Microsoft 365. It is the newest area of the exam and the one older study materials cover least.
Privileged access. Six objectives: Microsoft Entra roles in PIM (settings and assignments), Azure resources in PIM, PIM for Groups, the request and approval process, analysing PIM audit history and reports, and emergency access accounts.
How the exam is split by domain
Implement and manage user identities (20–25%): Microsoft Entra tenant, identities, external identities and hybrid identity.
Implement authentication and access management (25–30%): user authentication, Conditional Access, Microsoft Entra ID Protection and Global Secure Access.
Plan and implement workload identities (20–25%): identities for applications and Azure workloads (managed identities, service principals), enterprise application integration, app registrations and Microsoft Defender for Cloud Apps.
Plan and automate identity governance (20–25%): entitlement management, access reviews, privileged access and monitoring with logs, workbooks and reports.
In total there are 16 areas and 98 objectives. Microsoft Entra Permissions Management no longer appears in the outline.
What to do depending on your exam date
If you sit before 28 October 2026, the previous version applies to you. Since the changes are minor and limited to three areas, preparing with the new version does not hurt: just make sure you also master what was already there.
If you sit after, or in a localized language and therefore with the localization delay, study the 28 October version and spend extra time on Global Secure Access, the block with the least preparation material available. The official study guide and the Microsoft Entra documentation are the reference.
On CertifyDeck, the SC-300 bank is organized by the 16 areas of the new guide, with questions and summaries per objective. Start with how to pass SC-300 and practice with the SC-300 questions.
Frequently asked questions
Is SC-300 retiring or changing code?
No. It remains SC-300 and still earns the Microsoft Certified: Identity and Access Administrator Associate certification. What changes on 28 October 2026 is the outline, and only slightly.
How much does the exam really change?
The official change log marks minor changes in three of the sixteen areas (user authentication, Global Secure Access and privileged access) and no change in the rest.
When does the change reach the localized versions?
The guide states that localized versions are updated approximately eight weeks after the English version, that is, around late December 2026, although Microsoft warns that this schedule may vary.