SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization is using Microsoft Entra ID. You want to provide a single sign-on (SSO) experience for users accessing multiple SaaS applications. Which feature should you implement?
⚠ Common exam trap
Test-takers frequently confuse the My Apps portal (a user interface for launching apps) with the actual SSO authentication mechanism, but the portal itself does not perform authentication—it relies on Entra ID as the identity provider.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID as an identity provider
Microsoft Entra ID acts as an identity provider (IdP) to enable single sign-on (SSO) for SaaS applications. When configured as the IdP, Entra ID authenticates the user once and issues a security token (e.g., SAML 2.0 assertion or OpenID Connect token) that is accepted by the SaaS application, eliminating the need for repeated logins. This is the core mechanism for federated SSO across multiple cloud applications.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra ID as an identity provider
Why this is correct
Microsoft Entra ID functions as a robust cloud-based identity provider (IdP), centralizing user authentication and authorization. When configured for single sign-on (SSO) with a Software as a Service (SaaS) application, Entra ID authenticates the user and then issues a security token, often using protocols like SAML or OpenID Connect, to the SaaS application (the service provider). This federated identity model allows users to access multiple SaaS applications with a single set of credentials, eliminating the need for separate logins and improving security posture.
- ✗
Microsoft Entra application proxy
Why it's wrong here
Microsoft Entra Application Proxy is designed to provide secure remote access to on-premises web applications. It acts as a reverse proxy, publishing internal applications to external users without requiring a VPN or changes to network DMZs. Its primary function is to bridge the gap between external users and internal resources, not to facilitate single sign-on for external Software as a Service (SaaS) applications that are already hosted in the cloud by third-party vendors.
- ✗
Microsoft Entra myapps portal
Why it's wrong here
The Microsoft Entra My Apps portal serves as a personalized, web-based launchpad for users to discover and access the applications assigned to them. While it provides a convenient interface for users to initiate access to SaaS applications, the portal itself does not provide the underlying single sign-on (SSO) functionality. The actual authentication and token issuance for SSO are handled by Microsoft Entra ID acting as the identity provider in the background, not by the My Apps portal's interface.
- ✗
Microsoft Entra Privileged Identity Management
Why it's wrong here
Microsoft Entra Privileged Identity Management (PIM) is a service focused on managing, controlling, and monitoring access to important resources within an organization. Its core purpose is to provide just-in-time and just-enough access to privileged roles, reducing the risk associated with standing administrative permissions. PIM is entirely unrelated to the technical mechanism for implementing single sign-on (SSO) for general user access to Software as a Service (SaaS) applications; it addresses privilege escalation and auditing, not federated authentication.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Single sign-on
Single sign-on (SSO) is an authentication method that allows a user to log in once and gain access to multiple applications or systems without re-entering credentials.
Key term
OpenID Connect
OpenID Connect is an identity layer on top of OAuth 2.0 that allows applications to verify a user's identity and obtain basic profile information in a standardized way.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.