- SC-300 is Microsoft's Identity and Access Administrator Associate exam, delivered via Pearson VUE.
- Four domains cover identities, authentication/access, workload identities, and identity governance.
- You need 700 out of 1000 scaled points to pass - not a flat 70% correct.
- The exam runs 100 minutes inside a 120-minute proctored appointment.
What Is SC-300 Certification?
SC-300 is the exam code Microsoft assigns to the Microsoft Certified: Identity and Access Administrator Associate credential, formally tied to the "Microsoft Identity and Access Administrator" exam. It's a vendor certification issued by Microsoft and delivered through Pearson VUE testing centers or Pearson's remote proctoring option where supported. If you land on this page after seeing "SC-300" mentioned elsewhere, it's worth noting there is only one credential this code refers to on this site: Microsoft's identity and access administration exam - not any other certification that happens to share similar naming conventions.
The certification validates that you can plan, implement, and operate identity and access solutions built on Microsoft's ecosystem - primarily Microsoft Entra ID (Azure AD), Microsoft 365, and connected on-premises Active Directory Domain Services (AD DS). If you want the short version before diving into domain detail, our What Is SC-300? primer covers the basics in fewer words.
What the SC-300 Exam Actually Tests
Unlike broad "know a bit of everything" exams, SC-300 is scoped tightly around identity administration tasks that a real administrator performs day to day. Expect scenario-driven questions where you're given a business requirement - say, a merger requiring guest access, or a compliance mandate requiring access reviews - and asked to choose the correct configuration, policy, or PowerShell/KQL approach to satisfy it.
Microsoft does not publish the exact total question count, and the split between scored and unscored items is undisclosed. Microsoft's associate-level exams generally fall somewhere in the 40-60 question range, but that is not a guarantee for SC-300 specifically, so don't build your pacing strategy around an assumed number. What is fixed: you get 100 minutes of exam time inside a 120-minute total appointment, with the extra time covering the NDA, tutorial, and post-exam survey.
The exam is proctored and computer-based, and Microsoft indicates interactive components may appear, though the exact type and lab mix are undisclosed. Treat every question as potentially requiring more than simple recall - some may ask you to sequence steps, match configurations, or interpret a scenario before selecting an answer.
Key Takeaway
Don't memorize menu paths in isolation - practice reasoning through scenarios, because SC-300 rewards applied judgment over rote fact recall.
The Four SC-300 Exam Domains
Microsoft organizes the SC-300 blueprint into four domains. Note that Microsoft's own published materials show a small inconsistency: the summary table lists Domain 2 at 25-30%, while the detailed heading elsewhere lists it at 20-25%. That conflict is unresolved in Microsoft's documentation, so we use the summary figure here as the primary reference point.
Domain 1: Implement and manage user identities (20-25%)
Covers creating and managing identities in Microsoft Entra ID, hybrid identity concepts connecting to AD DS, and lifecycle tasks like bulk operations, external identities, and licensing.
- Hybrid identity synchronization concepts and health monitoring
- Creating, configuring, and managing users and groups
- External/guest identity collaboration settings
Domain 2: Implement authentication and access management (25-30%)
The largest domain under the summary weighting, focused on how users prove who they are and what they can access afterward.
- Authentication methods, multifactor authentication, and passwordless approaches
- Conditional Access policy design and troubleshooting
- Role-based access control and access to applications
Domain 3: Plan and implement workload identities (20-25%)
Focuses on non-human identities - the service principals, managed identities, and app registrations that connect applications and automation to your tenant.
- App registrations and enterprise application configuration
- Managed identity use cases for Azure resources
- Securing and monitoring workload identity risk
Domain 4: Plan and automate identity governance (20-25%)
Covers the policies and automation that keep access appropriate over time rather than granted once and forgotten.
- Entitlement management and access packages
- Access reviews and periodic recertification
- Privileged Identity Management and just-in-time elevation
For a deeper breakdown of each domain - including subtopics, sample question angles, and how the weighting affects your prep sequencing - see the SC-300 Exam Domains 2026: Complete Guide to All 4 Content Areas. The current outline is scheduled to take effect for the English exam on April 27, 2026, so double-check which version of the blueprint you're studying against as that date approaches.
Exam Format, Registration & Fees
SC-300 is administered exclusively through Pearson VUE, either at a physical test center or via remote proctoring where that option is supported in your region. Microsoft's general Associate-level exam baseline in the U.S. is typically listed around US$165, but the exact current checkout fee specific to SC-300 is not independently verified here, and regional taxes or promotional discounts can shift the final total. Because pricing details change and vary by country, always confirm the exact figure at checkout rather than relying on a remembered number - and see our dedicated SC-300 Certification Cost 2026: Complete Pricing Breakdown article for a fuller pricing discussion.
| Attribute | Detail |
|---|---|
| Delivery method | Proctored, computer-based via Pearson VUE |
| Exam time | 100 minutes |
| Total appointment | 120 minutes |
| Passing score | 700 out of 1000 (scaled score) |
| Certification validity | 12 months |
| Renewal method | Free, open-book, unproctored online assessment |
If you're planning around a specific testing window, check SC-300 Exam Dates 2026: Testing Windows, Deadlines & Scheduling before you book, especially with the outline update landing in April 2026.
Who SC-300 Is Built For
Microsoft doesn't publish a formal prerequisite list for SC-300 - there's no required degree, no mandatory prior certification, and no quantified minimum hours of training or experience listed as a hard gate. That said, the exam assumes working familiarity with Azure, Microsoft 365, AD DS, PowerShell, and Kusto Query Language (KQL), because several exam scenarios expect you to interpret or write short queries and scripts rather than just recognize portal menus.
In practice, this credential fits identity-focused roles: identity and access administrators, security engineers responsible for authentication policy, Microsoft 365/Entra administrators expanding into governance, and consultants implementing Conditional Access or Privileged Identity Management for clients. If you're evaluating whether your current background lines up, our SC-300 Requirements 2026: Eligibility, Prerequisites & How to Qualify guide walks through realistic entry points, and the SC-300 Jobs article outlines the kinds of roles that typically list this credential in job postings.
Passing Score and What "Passing" Really Means
SC-300 uses a scaled scoring model, and you need 700 out of 1000 points to pass. This is important because it is not the same as needing 70% of questions correct - Microsoft weights different questions differently, and the scaled score accounts for item difficulty rather than a flat percentage. Microsoft has not publicly disclosed an official pass rate for SC-300, so treat any specific pass-rate number you see elsewhere with skepticism; our own SC-300 Pass Rate 2026: What the Data Shows piece explains why that figure isn't something Microsoft releases and what you can infer instead.
For a complete breakdown of how the scaled scoring model works and what it means for how you should study, read SC-300 Passing Score 2026: Exactly What You Need to Pass.
Mapping a Realistic Preparation Path
Because Domain 2 (authentication and access management) carries the largest weight under Microsoft's summary breakdown, it deserves proportionally more study time than the other three domains - but don't let it crowd out governance and workload identity topics, since those areas often trip up candidates who spend all their prep time in the Entra portal clicking through Conditional Access policies and never touch entitlement management or managed identities.
Domain 1 + Domain 2 Foundations
- Build hybrid identity and synchronization concepts
- Practice Conditional Access policy scenarios
- Review authentication method configurations hands-on
Domain 3: Workload Identities
- Configure app registrations and enterprise applications
- Test managed identity assignment on Azure resources
- Review workload identity risk detection basics
Domain 4 + Full Review
- Practice entitlement management and access packages
- Run through PIM just-in-time elevation scenarios
- Take timed practice questions across all four domains
This is only a skeleton - for a fuller week-by-week plan with specific resource recommendations and review checkpoints, see the SC-300 Study Guide 2026: How to Pass on Your First Attempt. And if you're still deciding how much runway you actually need, How Hard Is the SC-300 Exam? Complete Difficulty Guide 2026 breaks down where most candidates report the exam feels toughest.
Whatever timeline you follow, running scenario-style practice questions on our practice test platform before exam day helps surface which domain still needs work - it's a faster feedback loop than re-reading documentation alone. Many candidates use a full practice exam simulation in the final week specifically to rehearse pacing across the 100-minute window.
Validity and Renewal
Once earned, SC-300 certification stays valid for 12 months. Rather than requiring you to retake the full proctored exam, Microsoft offers a free, open-book, unproctored renewal assessment that becomes available during the six months before your certification expires. There's no continuing education unit (CDU/CEU/CPE) quota to track separately - the renewal assessment itself is the mechanism that keeps your credential current. This makes long-term maintenance considerably lighter than certifications requiring ongoing logged training hours.
Key Takeaway
Set a reminder roughly six months before your certification's expiration date so you don't miss the free renewal assessment window.
FAQ
Microsoft classifies it as an Associate-level credential. There's no mandatory prerequisite exam or degree, but the content assumes comfort with Azure, Microsoft 365, AD DS, PowerShell, and KQL, so it's not designed for someone with zero identity or cloud administration background.
You get 100 minutes to answer questions, within a total appointment window of 120 minutes that also covers instructions and the exit survey.
You need 700 out of 1000 on Microsoft's scaled scoring system. This isn't the same as answering 70% of questions correctly, since scaled scoring weighs question difficulty.
Under Microsoft's summary weighting, Domain 2 (implement authentication and access management) carries the most weight at 25-30%, making it a reasonable area to prioritize, though all four domains appear on the exam and shouldn't be neglected.
Yes, it's valid for 12 months. You can renew it for free through an open-book, unproctored online assessment available during the six months leading up to expiration, with no separate continuing education requirement.
If you're still weighing whether this credential fits your career path, our Is the SC-300 Certification Worth It? Complete ROI Analysis 2026 article and SC-300 Salary Guide 2026: Complete Earnings Analysis dig into that question in more depth than a single overview page can cover.