This article provides a checklist for the continued steps to configure your Standard Microsoft 365 education tenant.
Required Microsoft products
Deployment guide steps
Step 1 - Microsoft Entra Plan 1
Step 2 - Microsoft Entra P1 Access Controls
| |
Step |
| ☐ |
Conditional Access - Define access policies based on user roles, devices, and locations to secure student and staff access to resources |
| ☐ |
Multi-factor Authentication - Secure access to educational resources by requiring additional verification steps |
| ☐ |
Role-Based Access Control (RBAC) - Assign specific permissions to users based on their roles |
| ☐ |
Single Sign-On (SSO) -Allow users to access multiple applications and resources with a single set of credentials |
| ☐ |
Dynamic Group Management - Simplify user and device organization in educational institutions by automatically assigning group memberships based on attributes |
Step 3 - Microsoft Entra P1 Password management
| |
Step |
| ☐ |
Self-service password reset - Empower students and staff to securely reset their passwords without administrator assistance |
| ☐ |
Hybrid user self-service password change/reset with on premises write-back - Hybrid user self-service password change/reset with on-premises write-back is a Microsoft Entra ID capability that enables users in educational institutions to reset or change their passwords in the cloud and have those changes automatically synchronized back to their on-premises Entra ID Domain Services |
Step 4 - Microsoft Entra P1 App management
| |
Step |
| ☐ |
Application Proxy - Enable secure remote access to on-premises web applications without the need for a VPN |
Step 5 - Entitlement management
| |
Step |
| ☐ |
Entitlement management - Entitlement management in education, particularly through Microsoft Entra ID Governance, is a powerful identity governance capability that enables schools, districts, and higher education institutions to manage access to digital resources securely and at scale |
| ☐ |
Advanced security reports - Advanced security reports refer to a suite of Microsoft tools and reporting capabilities designed to help educational institutions monitor, assess, and improve their cybersecurity posture |
Step 6 - Security considerations
| |
Step |
| ☐ |
Advanced Threat Analytics - Microsoft Advanced Threat Analytics (ATA) is an on-premises platform designed to help protect your organization from advanced targeted cyber attacks and insider threats |
| ☐ |
Microsoft Defender for Cloud Apps - Microsoft Defender for Cloud Apps is a powerful tool that can significantly enhance cybersecurity in educational environments |
| ☐ |
Microsoft Defender for Cloud App Discovery - Microsoft Defender for Cloud Apps that helps you gain visibility into the cloud apps being used in your organization |