Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraEasy
A small non-profit organization uses Microsoft 365 and Microsoft Entra ID. They want to ensure that all their employees can easily access their cloud applications using a single set of credentials. Which core Microsoft Entra capability directly addresses this requirement?
- AMicrosoft Entra Privileged Identity Management (PIM)
- BSingle Sign-On (SSO)
- CMicrosoft Entra Identity Protection
- DMicrosoft Entra Domain Services
Show answer & explanationAnswer & explanation
Correct answer: B. Single Sign-On (SSO)
Single Sign-On (SSO) allows users to log in once with a single set of credentials and gain access to multiple applications without re-authenticating. This directly meets the organization's need for easy access to cloud applications with one set of credentials.
Why the other options are wrong
- A. Microsoft Entra Privileged Identity Management (PIM) manages, controls, and monitors access to important resources, which is not the primary goal here.
- C. Microsoft Entra Identity Protection focuses on detecting and remediating identity-based risks, not simplifying application access.
- D. Microsoft Entra Domain Services provides managed domain services for Azure-hosted virtual machines, not direct application access for users.
Single Sign-On (SSO)
A property of access control of multiple related, but independent, software systems. With SSO, a user logs in once with a single ID and password to gain access to a connected system or systems without using different usernames or passwords.
- Reduces password fatigue for users
- Improves security by reducing attack surface for credential theft
- Simplifies user experience and IT administration
Memory trick: One key unlocks all cloud doors.