microsoft/TechLab-Entra-Suite-for-Frontier-Transformation

microsoft/TechLab-Entra-Suite-for-Frontier-Transformation

License: MIT

Stars: 0

Forks: 1

Open issues: 1

Created: 2026-06-23T22:06:22Z

Pushed: 2026-06-25T17:34:02Z

Default branch: main

Fork: no

Archived: no

README: --- lab: title: TechLab: Entra Suite for Frontier Transformation description: level: 300 duration: 120 minutes islab: true primarytopics: ---

@lab.Title

Please enter your own Microsoft alias (without the @microsoft.com) in the field below before starting the lab. This information is required to correctly associate your activity with your learner record and ensure your completion is accurately captured and reported. For data integrity and compliance reasons, learners may only enter their own alias. After completing the lab, please allow up to 5 business days for all reporting systems to fully reflect your completion.

@lab.ActivityGroup(aliascapture)

===

Survey

@lab.ActivityGroup(initialsurvey)

===

Introduction

Microsoft Entra Suite is a Zero Trust user access solution that unifies identity governance, identity protection, identity verification, and network access security under a single Conditional Access policy engine.

Objectives

After completing this lab, you'll be able to:

• Automate user lifecycle and entitlements with lifecycle workflows, access packages, and risk-based Conditional Access.
• Replace VPN with per-app, identity-brokered access to on-premises applications using Global Secure Access Private Access.
• Configure just-in-time, time-bound access to sensitive resources with multi-stage approval and recurring access reviews.
• Apply network content filtering, MCP traffic discovery, and prompt injection protection to bring AI traffic - both human and agent - under enterprise identity policy.

Duration

Estimated time: 4 hours

===

Exercise 00: Set up your environment

Scenario

You've just stepped into a new role supporting Zava's IoT business. Before you can do anything meaningful, your organization needs to establish a secure, identity-first foundation that allows your access to be governed, evaluated, and enforced consistently across devices and services. This initial setup ensures that your identity, device, and authentication context can be trusted-forming the groundwork for every access decision that follows.

Objectives

In this exercise, you'll:

• Activate Microsoft Entra Suite capabilities.
• Configure identity and licensing for your user account.
• Establish a compliant, Entra-joined device.
• Prepare your user context for policy enforcement.

Duration

Estimated time: 15 minutes

===

>[!TIP] >As you follow the instructions in this pane, you can select highlighted +++Type Text+++ to write it directly into the virtual machine.

Task 01: Activate the Entra Suite trial

Introduction

Modern identity security begins with a unified control plane. Microsoft Entra Suite consolidates identity governance, authentication, and network access into a single policy-driven system. This eliminates fragmented controls and allows security decisions to follow identity rather than location.

Description

In this task, you activate the Entra Suite environment and establish administrative access. This enables all downstream capabilities-such as lifecycle workflows, Conditional Access, and identity-based network controls-to operate under a shared policy engine.

Example scenario

You're Adele, and on your first day in this new role, your organization enables a unified identity platform. Instead of managing separate systems for access, networking, and security, everything is now governed through a single identity layer that will determine what you can access-and under what conditions.

Success criteria

• Entra Suite is active and accessible
• Administrative access is established
• Identity services are ready for governance configuration

Learning resources

• Microsoft Entra overview
• Zero Trust identity principles

---

1. Sign in to the @lab.VirtualMachine(Windows11).SelectLink VM with the following credentials:

| Item | Value | |:---------|:---------| | Username | @lab.VirtualMachine(Windows11).Username | | Password | +++@lab.VirtualMachine(Windows11).Password+++ |

1. Open Microsoft Edge, then go to admin.cloud.microsoft/?pid=2EBF8FFA-7DE1-4D14-9B15-238F5CA77671&mpid=CFQ7TTC0NZT8%2C0001&ru=signup#/Purchase/trial.

1. Sign in with your lab credentials:

| Item | Value | |:---------|:---------| | Username | @lab.CloudCredential(WWLM365Enterprise2019wSPE_EStakeholderKimFrank).AdministrativeUsername | | Password | @lab.CloudCredential(WWLM365Enterprise2019wSPE_EStakeholderKimFrank).AdministrativePassword |

>[!alert] You'll need a personal mobile device to set up MFA on the account.

1. In the dialog for MFA, select Set up now.

!IMAGE[ldz73e3p.png](../../media/ldz73e3p.png)

1. Follow the onscreen prompts to use the Microsoft Authenticator app to enable MFA.

1. Once added, select Done.

1. In the rightmost pane of the trial activation page, select Try now.

!IMAGE[xdytkj7i.png](../../media/xdytkj7i.png)

1. Once activated, select Go to Admin Home.

!IMAGE[94tk5gts.png](../../media/94tk5gts.png)

===

Task 02: Add licenses

Introduction

Licensing is what enables capabilities at the identity level. Without proper licensing, advanced governance, risk detection, and access enforcement features aren't available to users.

Description

You assign Entra Suite licenses to both administrative and user identities. This ensures that your user account (Adele) can participate in automated lifecycle workflows, Conditional Access evaluation, and secure access scenarios later in the lab.

Example scenario

You're Adele, and your access experience should reflect your role immediately. Behind the scenes, your organization assigns you the necessary licenses so your identity can be evaluated, governed, and protected according to Zero Trust principles.

Success criteria

• Licenses assigned to required users
• Adele's account has Entra Suite capabilities enabled
• Identity is ready for governance and enforcement scenarios

Learning resources

• Identity licensing concepts in Microsoft Entra

---

1. In the leftmost pane, go to Billing > Licenses.

1. Select Microsoft Entra Suite.

1. Above the table, select Assign licenses.

!IMAGE[hhtvcr6x.png](../../media/hhtvcr6x.png)

1. In the flyout pane:

1. Search for and select the following accounts:

-...