SC-900 Practice Question: Describe the concepts of security, compliance, and identity
Your organization wants to use Microsoft Entra ID to provide single sign-on (SSO) for a third-party SaaS application. What must you configure in Microsoft Entra ID?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enterprise application registration
Enterprise application registration. To enable SSO for a third-party SaaS application in Microsoft Entra ID, you must register the application as an enterprise application and configure SSO settings. Option A is incorrect because Identity Protection policies are for detecting and responding to identity risks, not for SSO configuration. Option B is incorrect because Conditional Access policies enforce access controls based on conditions, but the prerequisite for SSO is the application registration. Option D is incorrect because self-service password reset is unrelated to SSO setup.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Identity Protection policy
Why it's wrong here
Identity Protection detects risks, not SSO.
- ✗
Conditional Access policy
Why it's wrong here
Conditional Access policies control access, they don't set up SSO.
- ✓
Enterprise application registration
Why this is correct
You register the SaaS app as an enterprise application and configure SSO.
- ✗
Self-service password reset
Why it's wrong here
SSPR is for password reset, not SSO.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
Identity protection
Identity protection is the set of policies, technologies, and practices used to secure digital identities and prevent unauthorized access to systems and data.
Key term
Identity
Identity is the unique set of attributes that defines a user, device, or service in a computer system, determining what they can access and do.
About these practice questions
This SC-900 question is part of Courseiva's 1,250-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.