SC-900 Describe the capabilities of Microsoft Entra Practice Question
A company uses Microsoft Entra ID. They have a critical internal web application that uses SAML 2.0 for authentication. They want to integrate this application with Microsoft Entra ID to enable single sign-on (SSO) and automate user provisioning. They also want to assign access based on group membership. Which Microsoft Entra ID feature should they use?
⚠ Common exam trap
The trap here is assuming that Application Proxy or B2B collaboration can handle SAML SSO and provisioning, but they serve different purposes.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra Enterprise Applications with SAML-based single sign-on and provisioning
Microsoft Entra Enterprise Applications is the correct feature for integrating SAML 2.0 applications. It provides a gallery of pre-integrated apps and supports custom SAML apps. You can configure SAML-based SSO, automate user provisioning via SCIM, and assign access through groups. This satisfies all the stated requirements: SSO, provisioning, and group-based assignment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra ID B2B collaboration
Why it's wrong here
B2B collaboration is designed for inviting external users to access resources. It does not provide SAML-based SSO integration for internal applications or automated user provisioning from Entra ID to the app. While B2B can be used for partner access, it does not address the requirement to integrate an internal SAML application with automated provisioning and group-based assignment.
- ✓
Microsoft Entra Enterprise Applications with SAML-based single sign-on and provisioning
Why this is correct
Enterprise Applications in Microsoft Entra ID allow you to integrate SAML 2.0 apps for SSO. You can configure SAML-based SSO, set up automated provisioning using SCIM, and assign users or groups to the application. This directly meets the requirements for SAML SSO, automated provisioning, and group-based access.
- ✗
Microsoft Entra ID Application Proxy
Why it's wrong here
Application Proxy enables remote access to on-premises web applications without exposing them to the internet. It does not provide SAML SSO integration for cloud or on-premises apps that support SAML. While Application Proxy can pre-authenticate with Entra ID, it is not used for automated user provisioning or group-based assignment to a SAML application.
- ✗
Microsoft Entra ID Conditional Access
Why it's wrong here
Conditional Access is used to enforce access controls based on signals like user, device, and location. It does not provide SAML SSO integration or user provisioning for applications. While it can be used in conjunction with Enterprise Applications to enforce policies, it alone does not fulfill the need to integrate a SAML app or automate provisioning.
Go deeper
Related to this question
Learn chapter
Shadow IT Discovery in Defender for Cloud Apps
Key term
SSO
Single Sign-On (SSO) is an authentication process that allows a user to access multiple applications or systems with one set of login credentials.
Key term
Single sign-on
Single sign-on (SSO) is an authentication method that allows a user to log in once and gain access to multiple applications or systems without re-entering credentials.
About these practice questions
This SC-900 question is part of Courseiva's 1,279-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.