hardMultiple ChoiceObjective-mapped
MS-102 Practice Question: Has multiple Microsoft Entra ID tenants and wants…
An organization has multiple Microsoft Entra ID tenants and wants to allow partner users to access internal applications using their own corporate credentials. Which feature should be used to enable this?
⚠ Common exam trap
It's easy for candidates to confuse Microsoft Entra B2B (for business partners) with Microsoft Entra B2C (for customers), leading them to select B2C because both involve external identities, but B2C does not support using the partner's own corporate credentials from another Entra ID tenant.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra B2B collaboration
Microsoft Entra B2B collaboration is the correct feature because it allows partner users to access internal applications using their own corporate credentials (their home tenant identity) without requiring any external accounts or local user management. B2B collaboration uses cross-tenant trust relationships, enabling seamless single sign-on (SSO) via SAML/WS-Fed or OIDC protocols, which aligns with the requirement to use existing partner credentials.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra B2B collaboration
Why this is correct
Microsoft Entra B2B collaboration is the appropriate feature because it allows you to invite external partner users from another Azure AD/Microsoft Entra tenant to access your resources while they authenticate with their own home-tenant credentials. This approach eliminates the need for creating separate accounts, maintains the partner's own identity lifecycle, and integrates with conditional access policies and access reviews, making it ideal for multi-tenant collaboration.
- ✗
Microsoft Entra B2C
Why it's wrong here
Microsoft Entra B2C is a customer identity and access management service designed for external customers of your applications, not for partner organizations. It relies on local accounts, social identities, or custom policies, and it deliberately separates customers from your enterprise directory rather than federating with another organization's existing Azure AD tenant. For partner users who already have enterprise credentials, B2C would force them into a separate consumer-style identity repository, which is not the correct solution.
- ✗
Azure AD Connect
Why it's wrong here
Azure AD Connect is a hybrid identity tool that synchronizes on-premises AD directory objects — users, groups, and attributes — into an Azure AD tenant, enabling a single identity for each user across on-premises and cloud. It does not provide any external authentication mechanism, nor does it accept or validate credentials from other Azure AD tenants; it only duplicates identities from your own on-premises environment. Thus, it cannot enable partner access for external users from other tenants.
- ✗
Tenant-to-tenant migration
Why it's wrong here
Tenant-to-tenant migration is a one-time administrative process for moving users, groups, and resources from one Entra tenant to another, typically requiring careful planning of re-created user objects, dependencies, and data transfer. It is not a native feature or ongoing access mechanism; it does not establish a federated identity relationship or permit external users to authenticate to a different tenant in real time. For continual partner access, B2B collaboration is the designed solution, as it provides a persistent, external-identity-based access model.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Tenant Setup
Key term
Single sign-on
Single sign-on (SSO) is an authentication method that allows a user to log in once and gain access to multiple applications or systems without re-entering credentials.
Key term
Collaboration
Collaboration in Microsoft 365 refers to the integrated tools and services that enable people to work together in real time, share information, and coordinate tasks from anywhere.
About these practice questions
This MS-102 question is part of Courseiva's 241-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.