SC-900 Describe the capabilities of Microsoft Entra Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Microsoft Entra federation with SaaS applications

  Why this is correct

  Microsoft Entra federation with SaaS applications is the correct solution because it enables employees to use their existing corporate Microsoft Entra ID credentials for single sign-on (SSO) to third-party Software as a Service (SaaS) applications. This process involves configuring Microsoft Entra ID as the identity provider, allowing it to authenticate users and securely pass identity assertions (e.g., via SAML or OIDC) to the SaaS application, eliminating the need for separate usernames and passwords. This enhances user experience, improves security posture, and centralizes identity management.

• ✗

  Microsoft Entra B2B collaboration

  Why it's wrong here

  Microsoft Entra B2B collaboration is incorrect because its primary purpose is to allow external users (guests) from other organizations or personal accounts to access your organization's applications and resources. It facilitates inbound access for external identities into your tenant, rather than enabling your internal employees to sign out to third-party SaaS applications using their corporate credentials. This service is designed for guest user management, not for federating internal user identities to external services.

• ✗

  Microsoft Entra Identity Protection

  Why it's wrong here

  Microsoft Entra Identity Protection is incorrect as it is a security service focused on detecting, investigating, and remediating identity-based risks within your Microsoft Entra ID environment. While crucial for protecting user accounts and sign-ins, it does not provide the foundational mechanism for employees to establish initial access or single sign-on to external SaaS applications. Its role is to monitor and protect existing access, not to enable the access itself.

• ✗

  Microsoft Entra Privileged Identity Management

  Why it's wrong here

  Microsoft Entra Privileged Identity Management (PIM) is incorrect because its function is to manage, control, and monitor access to important resources within your organization by providing just-in-time and just-enough access to privileged roles. PIM helps mitigate the risks of excessive, unnecessary, or misused access permissions for administrative accounts within the Microsoft Entra tenant, rather than facilitating general user access to external third-party SaaS applications.

Go deeper

Related to this question