A global company with multiple subsidiaries, each operating as a separate Azure AD tenant, wants to simplify resource sharing and collaboration. They need a solution that allows users from one subsidiary to seamlessly access applications and resources in another subsidiary's tenant without requiring separate guest invitations or re-authentication. All tenants are part of the same parent organization. Which Azure AD feature is designed for this specific scenario?
- AAzure AD External Identities
- BAzure AD B2B collaboration
- CAzure AD B2C tenants
- DAzure AD Multi-tenant organization (MTO)
Show answer & explanationAnswer & explanation
Correct answer: D. Azure AD Multi-tenant organization (MTO)
Azure AD Multi-tenant organization (MTO) is specifically designed for scenarios where a single parent organization has multiple Azure AD tenants and wants to enable seamless collaboration and resource access between them, including synchronized users and cross-tenant access settings, without the overhead of B2B invitations for every user.
Why the other options are wrong
- A. Azure AD External Identities is a broader term that encompasses B2B and B2C, but MTO is the specific feature for internal multi-tenant scenarios.
- B. Azure AD B2B collaboration is for inviting external users as guests, which requires invitations and doesn't provide the seamless, synchronized experience within a single organization's multiple tenants that MTO does.
- C. Azure AD B2C is for customer-facing applications and managing customer identities, not for internal multi-tenant organization collaboration.
Azure AD Multi-tenant Organization (MTO)
An Azure AD Multi-tenant organization (MTO) is a feature that enables seamless collaboration and resource sharing between multiple Azure AD tenants belonging to the same parent organization. It simplifies cross-tenant access and user management compared to traditional B2B collaboration.
- Designed for tenants within the same legal entity.
- Provides a more native and simplified experience than B2B guests.
- Facilitates synchronized user identities and cross-tenant access policies.
Memory trick: MTO: Many tenants, One Organization, Seamless flow.