Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDMedium
A company uses Microsoft Entra ID and has implemented Microsoft Entra Connect for hybrid identity. Users report that they are frequently prompted for credentials when accessing cloud applications, even after successfully signing in to their domain-joined machines. The company wants to eliminate these prompts for a smoother user experience. Which feature should you enable?
- AMicrosoft Entra Seamless Single Sign-On (SSO)
- BMicrosoft Entra ID Protection
- CConditional Access policies
- DMulti-Factor Authentication (MFA)
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Seamless Single Sign-On (SSO)
Microsoft Entra Seamless Single Sign-On (SSO) automatically signs users in when they are on their corporate network and connected to a domain-joined device. It uses Kerberos authentication to provide a seamless experience, eliminating the need for users to type their passwords when accessing cloud applications.
Why the other options are wrong
- B. ID Protection focuses on risk detection, not enhancing sign-in experience for valid users.
- C. Conditional Access policies enforce access rules but don't inherently provide a seamless sign-in without prompts.
- D. MFA adds an extra layer of security and would increase, not decrease, credential prompts.
Microsoft Entra Seamless SSO
Microsoft Entra Seamless Single Sign-On (Seamless SSO) automatically signs users in when they are on their corporate network and connected to a domain-joined device.
- Enhances user experience by eliminating password prompts.
- Works with Password Hash Synchronization (PHS) and Pass-through Authentication (PTA).
- Uses Kerberos authentication for seamless sign-in.
Memory trick: SSO makes sign-in Smooth, Conditional Access Controls it, MFA Makes it safer, ID Protection Protects it.