Microsoft Certified: Identity and Access Administrator AssociateImplement an authentication and access management solutionHard
A company wants to allow its employees to sign in to Azure AD-integrated applications using their personal Microsoft accounts (e.g., @outlook.com, @hotmail.com). This is for a specific set of applications used by a department that frequently collaborates with external consultants who use these accounts. What Azure AD feature should be configured to enable this authentication?
- AAzure AD B2C tenant.
- BAzure AD B2B collaboration with social identity providers.
- CAzure AD B2B direct connect.
- DAzure AD Connect with pass-through authentication.
Show answer & explanationAnswer & explanation
Correct answer: B. Azure AD B2B collaboration with social identity providers.
Azure AD B2B collaboration supports inviting external users with various identity providers, including personal Microsoft accounts (MSA) and social identity providers like Google or Facebook. By inviting these external consultants as guest users, they can use their existing personal Microsoft accounts to access specific Azure AD-integrated applications.
Why the other options are wrong
- A. Azure AD B2C is specifically for customer-facing applications (consumer identities), which is a different use case than enabling external consultants to access internal apps.
- C. B2B direct connect is for seamless collaboration between two *Azure AD tenants* without inviting guest users, not for personal Microsoft accounts.
- D. Azure AD Connect is for synchronizing on-premises AD users to Azure AD; it does not enable personal Microsoft account sign-in for external users.
Azure AD B2B External Identities
A capability within Azure AD B2B collaboration that allows external users to sign in using various identity providers beyond just other Azure AD tenants.
- Supports personal Microsoft accounts (MSA).
- Supports social identity providers like Google and Facebook (after configuration).
- External users are added as guest users in the inviting tenant.
Memory trick: B2B: Bring your own ID, even personal ones.