Microsoft Certified: Identity and Access Administrator AssociateImplement access governanceHard
A company employs a large number of contractors who require access to various applications and resources for limited durations. The company uses Microsoft Entra ID for identity management and has implemented entitlement management. They aim to streamline the onboarding and offboarding process for these contractors. Which type of connected organization should be configured in entitlement management to simplify the process of granting access to contractors who use Microsoft accounts (e.g., Outlook.com, Hotmail.com) and do not belong to another Microsoft Entra organization?
- ADirectly connected
- BOne-time passcode (email OTP)
- CMicrosoft Entra (external directory)
- DMicrosoft account (MSA)
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft account (MSA)
To allow external users who use personal Microsoft accounts (MSA) to request access packages, you must configure a connected organization of type 'Microsoft account'. This enables these users to sign in with their personal accounts.
Why the other options are wrong
- A. This is not a standard connected organization type. Connected organizations are typically 'Microsoft Entra' or 'External Azure AD' and 'Microsoft Account'.
- B. One-time passcode (OTP) is a fallback authentication method for external users without an Entra ID or MSA, not a connected organization type itself.
- C. This option is for B2B collaboration with other Microsoft Entra organizations, not personal Microsoft accounts.
Connected Organizations
A feature in Microsoft Entra entitlement management that allows you to specify external Microsoft Entra organizations or other identity providers (like Microsoft accounts) whose users can request access packages.
- Defines external identity providers for access package requests.
- Supports Microsoft Entra organizations (B2B) and Microsoft accounts (MSA).
- Essential for enabling self-service access for external users.
Memory trick: Connected Orgs are like the 'guest list' for external access.