Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraEasy
A small business uses Microsoft 365 and wants to allow employees to use their existing Microsoft Entra ID credentials to access a third-party HR application. Which core Microsoft Entra capability enables this single sign-on (SSO) functionality?
- AConditional Access
- BSelf-service password reset
- CSingle Sign-On (SSO)
- DApplication Proxy
Show answer & explanationAnswer & explanation
Correct answer: C. Single Sign-On (SSO)
Single Sign-On (SSO) is a core capability of Microsoft Entra ID that allows users to access multiple applications and services with a single set of credentials, eliminating the need to re-enter passwords.
Why the other options are wrong
- A. Conditional Access enforces policies based on conditions, but SSO is the underlying mechanism for seamless access.
- B. Self-service password reset allows users to reset their own passwords, unrelated to accessing third-party apps.
- D. Application Proxy provides remote access to on-premises web applications, not primarily for cloud SSO with third-party apps.
Single Sign-On (SSO)
A property of access control of multiple related, but independent, software systems. With SSO, a user logs in once and gains access to all systems without being prompted to log in again.
- Reduces password fatigue and improves user experience.
- Enhances security by reducing the attack surface related to multiple passwords.
- Microsoft Entra ID acts as the identity provider for SSO.
Memory trick: One key unlocks all doors with Entra's core.