Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A large organization needs to onboard and offboard external contractors and partners quickly and efficiently, granting them access to specific internal applications and resources while maintaining strict security and compliance. The solution must enable these external users to use their existing identities (e.g., from their own Microsoft Entra ID tenants or social accounts) without creating new credentials in the organization's tenant. Which Microsoft Entra capability is best suited for this scenario?
- AMicrosoft Entra B2B collaboration
- BMicrosoft Entra Application Management
- CMicrosoft Entra Entitlement Management
- DMicrosoft Entra Privileged Identity Management (PIM)
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra B2B collaboration
Microsoft Entra B2B collaboration allows organizations to invite external users (guests) to access their applications and resources, enabling them to sign in with their own identities. This streamlines onboarding/offboarding and maintains security without creating new accounts in the host tenant.
Why the other options are wrong
- B. Microsoft Entra Application Management focuses on managing access for internal users to various applications, not primarily external user collaboration.
- C. Microsoft Entra Entitlement Management can automate access requests and lifecycle for B2B guests but B2B collaboration is the underlying technology that enables the external identities.
- D. Microsoft Entra PIM manages just-in-time access for privileged roles, which is not the primary mechanism for general external user collaboration.
Microsoft Entra B2B Collaboration
A feature of Microsoft Entra ID that enables organizations to securely share their applications and resources with guest users from any organization or social identity, allowing them to sign in with their own credentials.
- Invites external users (guests) to access resources
- Guests use their own identities (Microsoft Entra ID, social)
- Streamlines onboarding/offboarding for partners/contractors
Memory trick: B2B: 'Bring Your Own ID' for seamless collaboration.