ICAM and MFA Fundamentals Course (Self-Paced)
IDCYSE7009SP

Self-paced online training with expert support

Most federal compromises start with a credential, not an exploit. This course takes a learner from what an identity actually is through to how an access decision gets made, and makes clear why some multifactor methods stop phishing and others do not.

$799 6.5 clock hours Live Support Start anytime

This course includes

  • 6.5 hours of project-based training from experts
  • Answers from real instructors
  • Retake for free within 1 year
  • Access to class recordings (30 days)
  • Verified digital certificate of completion
  • Learn at an accredited institution

This is the self-paced version. For live instruction enroll in ICAM and MFA Fundamentals Course.

Identity, Credential, and Access Management, taught for the federal staff who need to understand the identity layer without being identity engineers. The course runs the full chain in order: identity, proofing, authentication and MFA, authorization, federation, and the access decision itself.

Lead with the MFA material, because that is the part agencies are under pressure on. Most identity training stops at "turn on MFA"; this one explains which MFA and why. Multifactor is broken apart rather than treated as a single checkbox: authenticator types are separated, the assurance levels behind them are explained, and the attacks aimed directly at MFA are covered in detail — phishing, MFA fatigue, credential theft, and adversary-in-the-middle. Learners come away able to say why a push notification and a PIV card are not equivalent controls. The final module is applied. Short scenario exercises framed as "Should this user get access?" require learners to pull identity, credential, authentication, and authorization into a single decision, in the way a Zero Trust access decision is actually made. The course works with the federal assurance-level model (IAL, AAL, and FAL), PIV credentials in federal environments, Zero Trust access decisions, RBAC and ABAC, and introductory SAML, OAuth, and OpenID Connect.

Read more

This course has a prerequisite

Basic cybersecurity knowledge.

A group of adult learners sits in a classroom, smiling and engaged in a government training session.
A government training instructor in a suit gestures while teaching in front of a whiteboard covered with notes and diagrams.
A person in professional attire holds a Graduate School USA folder, symbolizing participation in government training programs.

Group Training

Since 1921, Graduate School USA has partnered with over 125 federal agencies and trained more than one million federal employees. Led by instructors with deep, real-world knowledge of federal regulations, policies, and practices, our private group programs are practical, mission-driven, and tailored to your agency’s objectives. We offer expertise across key federal domains—including human resources, financial management, acquisition and contracting, leadership, and more—to deliver training where and how your team needs it.

Complete this form and we’ll get back to you within 1 business hour.

The Fact Is – We’ve Been Government’s Training Partner Since 1921

400+ Courses & Certificates 125+ Federal Agencies Served 200+ Subject-Matter Experts