SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your company wants to allow employees to use their corporate Microsoft Entra ID credentials to sign in to third-party SaaS applications like Salesforce and ServiceNow. Which Microsoft Entra feature should you configure?
⚠ Common exam trap
Candidates often confuse Conditional Access (which controls access after authentication) with the actual SSO configuration feature, or they mistakenly think B2B collaboration is for internal users accessing external apps, when it is specifically for external users accessing internal resources.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enterprise applications with pre-integrated gallery apps.
Configuring a third-party SaaS application like Salesforce or ServiceNow as an Enterprise Application in Microsoft Entra ID allows you to set up federation using SAML 2.0 or OpenID Connect, enabling users to sign in with their corporate Entra ID credentials. The pre-integrated gallery apps provide pre-configured templates that simplify the setup of single sign-on (SSO) and user provisioning, making it the appropriate feature for this requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Conditional Access policies.
Why it's wrong here
Conditional Access policies are designed to enforce specific conditions and controls *after* a user has successfully authenticated and *before* they gain access to a resource. They do not configure the underlying Single Sign-On (SSO) mechanism for an application but rather layer security, such as requiring multi-factor authentication or a compliant device, on top of an existing authentication flow. Therefore, they are not the primary tool for enabling SSO for an application.
- ✗
Microsoft Entra B2B collaboration.
Why it's wrong here
Microsoft Entra B2B collaboration is a feature specifically tailored for inviting and managing external users (guests) from other organizations to access an organization's applications and resources. While these external users might utilize SSO to access the inviting tenant's resources, B2B itself is not the mechanism for *configuring* Single Sign-On for internal employees to access corporate applications. Its focus is on external identity management, not internal application SSO setup.
- ✗
Microsoft Entra Identity Protection.
Why it's wrong here
Microsoft Entra Identity Protection is a security feature focused on detecting, investigating, and remediating identity-based risks, such as compromised credentials, suspicious sign-in activities, or anomalous user behavior. It provides risk-based Conditional Access enforcement and reporting but does not offer any functionality to *configure* or *enable* Single Sign-On (SSO) for applications. Its primary role is to protect identities, not to integrate applications for SSO.
- ✓
Enterprise applications with pre-integrated gallery apps.
Why this is correct
Enterprise applications in Microsoft Entra ID provide the central framework for integrating various applications, including Software as a Service (SaaS) applications. The pre-integrated gallery apps offer ready-to-use templates with pre-configured settings for popular SaaS applications, significantly simplifying the process of enabling Single Sign-On (SSO). This allows employees to access corporate applications using their existing Microsoft Entra credentials without needing to re-authenticate, streamlining access and enhancing security.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Federation
Federation is a system that lets you use one set of login credentials (like your work email and password) to access resources across different organizations or services without needing separate accounts for each one.
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.