Service principal
A service principal is the local representation of an application in a Microsoft Entra tenant, used to grant it access to resources. SC-300 covers selecting service principals and managed identities for workloads.
All SC-300 Terms
Microsoft Entra ID
Microsoft Entra ID is Microsoft's cloud identity and access management service, formerly Azure Active Directory.
Conditional Access
Conditional Access is a Microsoft Entra capability that enforces access policies based on signals such as user, device, location, and risk.
Continuous access evaluation
Continuous access evaluation (CAE) is a mechanism that revokes access in near real time when conditions change, rather than waiting for token expiry.
Multifactor authentication
Multifactor authentication (MFA) requires two or more verification factors before granting access.
FIDO2
FIDO2 is a passwordless authentication standard using passkeys and security keys.
Windows Hello for Business
Windows Hello for Business is a passwordless authentication method that replaces passwords with biometrics or a PIN bound to a device.
Privileged Identity Management
Privileged Identity Management (PIM) is a Microsoft Entra service providing just-in-time, time-bound, and approval-based access to privileged roles.
Entitlement management
Entitlement management is a Microsoft Entra identity-governance feature that manages access packages, catalogs, and access requests at scale.
Access review
An access review is a Microsoft Entra governance control that periodically recertifies whether users still need their access.
Managed identity
A managed identity is a Microsoft Entra identity automatically managed by Azure that lets a resource authenticate without stored credentials.
Service principal
A service principal is the local representation of an application in a Microsoft Entra tenant, used to grant it access to resources.
App registration
An app registration defines an application's identity and configuration in Microsoft Entra, including authentication, API permissions, and app roles.
Enterprise application
An enterprise application is an instance of an application in a Microsoft Entra tenant configured for single sign-on and user assignment.
Hybrid identity
Hybrid identity connects on-premises Active Directory with Microsoft Entra ID so users have a single identity.