Microsoft Certified: Identity and Access Administrator AssociateImplement an authentication and access management solutionHard
A large enterprise with multiple subsidiary companies, each with its own Azure AD tenant, needs to collaborate efficiently. Users from one subsidiary must be able to seamlessly access applications hosted in another subsidiary's tenant, and administrators need a simplified way to manage cross-tenant access without individual B2B invitations. Which Azure AD feature is designed to address this scenario?
- AAzure AD Guest User Management
- BAzure AD B2C
- CAzure AD B2B Collaboration
- DAzure AD Multi-tenant Organization (MTO)
Show answer & explanationAnswer & explanation
Correct answer: D. Azure AD Multi-tenant Organization (MTO)
Azure AD Multi-tenant Organization (MTO) is specifically designed for scenarios where multiple Azure AD tenants belonging to the same organization need to collaborate seamlessly. It provides a more streamlined and scalable approach to cross-tenant access and management compared to individual B2B invitations.
Why the other options are wrong
- A. Guest User Management is part of B2B Collaboration and faces the same limitations regarding scalability and streamlined management for internal enterprise collaboration.
- B. Azure AD B2C is for customer-facing applications, not for internal enterprise collaboration between tenants.
- C. B2B Collaboration allows external users (guests) to access resources, but for multiple tenants within the same enterprise, it can be cumbersome due to individual invitations and guest lifecycle management. MTO offers a more integrated solution.
Azure AD Multi-tenant Organization (MTO)
A feature in Azure AD that enables seamless collaboration across multiple Azure AD tenants belonging to the same enterprise, providing a unified experience for users and simplified administration.
- Facilitates cross-tenant access without individual B2B invitations.
- Users maintain their home tenant identity.
- Simplifies resource sharing and administration across organizational boundaries.
Memory trick: MTO is for my own tenants, B2B is for others.