Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A global manufacturing company uses Microsoft Entra ID. They need a way to automatically manage the lifecycle of user accounts and attributes across various cloud-based human resources (HR) applications and on-premises directories. Which Microsoft Entra capability should they implement?
- AMicrosoft Entra Connect Sync
- BMicrosoft Entra Provisioning
- CMicrosoft Entra Application Proxy
- DMicrosoft Entra Domain Services
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Provisioning
Microsoft Entra Provisioning automates the creation, maintenance, and removal of user identities and roles across various cloud and on-premises applications. This ensures that user access is consistent and up-to-date with HR system changes.
Why the other options are wrong
- A. Microsoft Entra Connect Sync synchronizes identities between on-premises Active Directory and Microsoft Entra ID, but does not manage provisioning to cloud HR apps.
- C. Microsoft Entra Application Proxy provides secure remote access to on-premises web applications, not identity provisioning.
- D. Microsoft Entra Domain Services provides managed domain services for legacy applications, not identity provisioning to HR apps.
Microsoft Entra Provisioning
Automates the creation, maintenance, and removal of user identities and roles across various cloud and on-premises applications.
- Automates identity lifecycle management
- Connects Microsoft Entra ID to HR systems and other applications
- Supports both cloud and on-premises applications
Memory trick: Provisioning is like a smooth conveyor belt for user accounts.