Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A company is integrating a new cloud-based SaaS application with Microsoft Entra ID. They want to automate the creation of user accounts in the SaaS application when new employees join the company, and automatically deactivate those accounts when employees leave. This process should eliminate manual administrative effort. Which Microsoft Entra capability enables this automated user lifecycle management?
- AMicrosoft Entra B2B Collaboration
- BMicrosoft Entra Connect Sync
- CMicrosoft Entra Application Provisioning
- DMicrosoft Entra Entitlement Management
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Entra Application Provisioning
Microsoft Entra Application Provisioning automates the creation, maintenance, and removal of user identities across various cloud-based SaaS applications and on-premises systems. This directly addresses the need for automated user lifecycle management for the new SaaS application.
Why the other options are wrong
- A. Microsoft Entra B2B Collaboration is for inviting external users, not for automating internal user provisioning to SaaS apps.
- B. Microsoft Entra Connect Sync synchronizes identities between on-premises AD and Microsoft Entra ID, not directly with SaaS applications for provisioning.
- D. Microsoft Entra Entitlement Management manages access to groups and applications through access packages, but provisioning itself is handled by Application Provisioning.
Microsoft Entra Application Provisioning
A Microsoft Entra ID capability that automates the creation, maintenance, and removal of user identities in target applications based on changes in Microsoft Entra ID.
- Automates 'create, read, update, delete' (CRUD) operations for user accounts
- Reduces manual administrative overhead and errors
- Improves security by ensuring timely deprovisioning
Memory trick: Provisioning is the automatic employee handler for apps.