Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A financial institution needs to provision user accounts and synchronize their attributes from Microsoft Entra ID to a newly adopted cloud-based HR application (SaaS) and ensure that changes made in Entra ID are automatically reflected in the HR app. Which Microsoft Entra capability automates this identity provisioning?
- AMicrosoft Entra Identity Protection
- BMicrosoft Entra Connect
- CMicrosoft Entra Application Provisioning
- DMicrosoft Entra Conditional Access
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Entra Application Provisioning
Microsoft Entra Application Provisioning automates the creation, maintenance, and removal of user identities across various cloud applications (SaaS apps) and on-premises systems, ensuring that user attributes are synchronized.
Why the other options are wrong
- A. Identity Protection focuses on risk detection, not automated provisioning to SaaS apps.
- B. Connect synchronizes on-premises AD to Entra ID, not Entra ID to SaaS apps.
- D. Conditional Access enforces policies at sign-in time, not for identity provisioning.
Microsoft Entra Application Provisioning
A Microsoft Entra ID service that automates the creation, maintenance, and removal of user identities across various applications, both cloud-based (SaaS) and on-premises.
- Automates identity lifecycle management to external applications.
- Supports provisioning, deprovisioning, and attribute synchronization.
- Enhances security by ensuring timely access removal.
Memory trick: Application Provisioning is the automated courier, delivering and updating user details to all your apps.