Microsoft Certified: Azure Administrator AssociateManage Azure identities and governanceEasy
A company uses Azure Active Directory (Azure AD) to manage user identities. A new project requires a group of external contractors to access specific Azure resources. These contractors do not have existing Azure AD accounts and should not be added to the company's internal user directory. You need to create a mechanism for these contractors to authenticate and access the resources securely. Which of the following Azure AD features should you use?
- AAzure AD Domain Services
- BAzure AD Connect synchronization
- CAzure AD Application Proxy
- DAzure AD B2B collaboration
Show answer & explanationAnswer & explanation
Correct answer: D. Azure AD B2B collaboration
Azure AD B2B collaboration allows you to invite external users (guests) to your Azure AD tenant, enabling them to use their existing identities (e.g., work, school, or social accounts) to access your applications and resources without creating new accounts in your directory. This perfectly fits the scenario of external contractors.
Why the other options are wrong
- A. Azure AD Domain Services provides managed domain services for cloud-based virtual machines, not for managing external user access.
- B. Azure AD Connect synchronizes on-premises Active Directory users to Azure AD, which is not suitable for external contractors, and they do not have on-premises accounts.
- C. Azure AD Application Proxy provides secure remote access to on-premises web applications, which is not relevant for external contractor identity management.
Azure AD B2B Collaboration
A feature in Azure AD that allows organizations to securely invite external users (guests) to their Azure AD tenant, enabling them to access applications and resources using their existing identities.
- Enables secure access for external partners/contractors.
- Guests authenticate with their own identity providers.
- No need to create new accounts in the host tenant.
Memory trick: B2B is the bridge for guests to access your digital home.