Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A large organization needs to onboard and offboard external contractors and partners quickly and securely, providing them with controlled access to specific resources without creating full user accounts in their primary Microsoft Entra ID tenant. Which Microsoft Entra capability is best suited for this scenario?
- AMicrosoft Entra Identity Protection
- BMicrosoft Entra Application Proxy
- CMicrosoft Entra Privileged Identity Management
- DMicrosoft Entra B2B Collaboration
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra B2B Collaboration
Microsoft Entra B2B Collaboration allows organizations to invite external users (guests) to their Microsoft Entra ID tenant, granting them access to specific applications and resources while using their own credentials from their home directory.
Why the other options are wrong
- A. Identity Protection focuses on risk detection for all identities, but B2B is the capability for managing external users.
- B. Application Proxy provides remote access to on-premises apps, not external user management.
- C. PIM manages privileged roles for internal users, not external guest access.
Microsoft Entra B2B Collaboration
A feature within Microsoft Entra ID that enables you to securely share your applications and services with external users (guests) from any organization, while allowing them to sign in using their own identities.
- Invites external users as 'guest' accounts.
- Guests use their own identity provider (e.g., Entra ID, Microsoft account, Google).
- Provides granular control over guest access to resources.
Memory trick: B2B Collaboration is like inviting guests to your digital home, they use their own keys but follow your house rules.