Learn to design and operate identity and access controls, including SSO, MFA, RBAC, privileged access management, identity lifecycle processes and IAM in cloud platforms.
The Identity and Access Management (IAM) course in Doha, Qatar explains how organizations control who can access which systems and data, and why identity has become a primary security perimeter. Learners cover authentication and authorization fundamentals, single sign-on with SAML 2.0 and OpenID Connect, multi-factor authentication including phishing-resistant methods such as FIDO2 passkeys, role-based and attribute-based access control, and privileged access management. The course also treats joiner, mover and leaver processes, access reviews and the principle of least privilege as everyday operational disciplines.
Cloud identity receives dedicated attention. Participants compare IAM concepts in Microsoft Entra ID (formerly Azure Active Directory), AWS Identity and Access Management and Google Cloud IAM, including policies, roles, conditional access and federation. Demonstrations and lab exercises include writing a least-privilege policy, designing a role model and planning an access recertification campaign. Case studies of credential theft and privilege misuse show what goes wrong without strong IAM. The course can be delivered as an in-house program for organizations reviewing their own identity platforms.
By the end of this course, participants will be able to:
Distinguish identification, authentication, authorization and accountability in access control
Explain how SSO works using SAML 2.0, OAuth 2.0 and OpenID Connect
Select appropriate MFA methods, including phishing-resistant options such as FIDO2
Design role-based access models that enforce least privilege and segregation of duties
Describe privileged access management controls such as vaulting, just-in-time access and session recording
Compare IAM policies and roles in Microsoft Entra ID, AWS IAM and Google Cloud IAM
Plan identity lifecycle processes and periodic access reviews
This course is aimed at IT and security professionals who administer, design or audit user access across on-premises and cloud systems.
System and directory administrators
IAM engineers and identity specialists
Cloud administrators and architects
Information security officers
IT auditors reviewing access controls
Service desk leads handling account provisioning
Identities, accounts, credentials and entitlements
Least privilege, need to know and segregation of duties
Directory services: Active Directory and LDAP concepts
Zero trust principles and identity as the perimeter
Password policy aligned with NIST SP 800-63B guidance
SAML 2.0, OAuth 2.0 and OpenID Connect flows
MFA factors, push fatigue attacks and FIDO2 passkeys
Conditional access and risk-based authentication
RBAC, ABAC and role engineering techniques
Joiner, mover and leaver lifecycle automation
Access certification campaigns and orphaned account cleanup
Provisioning standards such as SCIM
Identifying privileged, service and break-glass accounts
Credential vaulting, rotation and just-in-time elevation
Session monitoring and recording for administrators
Defending against credential theft and lateral movement
Microsoft Entra ID roles, groups and conditional access
AWS IAM users, roles and JSON policy evaluation
Google Cloud IAM principals, roles and resource hierarchy
Federation, workload identities and cross-account access
As Qatar's ministries, banks, energy companies and healthcare providers move services to cloud platforms and offer more digital channels to citizens and customers, controlling identities has become central to protecting sensitive systems. National cybersecurity guidance from Qatar's National Cyber Security Agency emphasizes access control and strong authentication. Professionals skilled in IAM help organizations reduce credential-based attacks, meet audit expectations and support the secure digital transformation that underpins Qatar National Vision 2030.
Join a scheduled class at our training center in Doha or attend live online. For organizations, the course can run as an in-house program at your premises or online, tailored to your sector, examples and schedule.
It is a course in Doha, Qatar that teaches how to manage digital identities and access rights, covering SSO, MFA, RBAC, privileged access management, identity lifecycle processes and IAM in Microsoft Entra ID, AWS and Google Cloud.
It suits system and directory administrators, IAM engineers, cloud administrators, security officers and IT auditors who are responsible for granting, reviewing or securing user and administrator access in on-premises or cloud environments.
No. It is vendor-neutral in its principles and uses Microsoft Entra ID, AWS IAM and Google Cloud IAM as examples of how the same concepts are applied. Skills transfer to other identity platforms and PAM tools.
Yes. It can be delivered at your premises or online and tailored to your sector, examples and schedule, for example by focusing on the identity platforms you already use. Contact Leaders Training Center to plan it.
Tell us a little about yourself and an advisor will contact you about batch timings, fees and eligibility. No obligation.
Sat–Thu: 09:00–22:00Fri: 08:00–22:00
Build a solid technical grounding in cybersecurity: core security principles, common threats, network and endpoint defenses, identity controls and the frameworks IT teams use to manage risk.
Learn how attackers find and exploit weaknesses, and practice reconnaissance, scanning, enumeration and basic exploitation in an isolated lab, always within legal authorization and an agreed scope.
Learn to plan, run and report a structured penetration test, from scoping and rules of engagement through network, web and Active Directory testing in a lab to risk-rated findings.
Prepare for the CompTIA Security+ exam by working through its domains, from threats and security architecture to operations and governance, with labs, scenario questions and practice reviews.
