Microsoft Certified: Identity and Access Administrator AssociateImplement and manage workload identitiesMedium
An organization uses Azure AD for identity management. A new SaaS application, 'DocuSign', needs to be integrated with Azure AD for single sign-on (SSO). The application supports SAML 2.0. You need to configure the necessary workload identity in Azure AD to enable SSO for DocuSign users. Which type of object should you provision for the DocuSign application in Azure AD?
- AA Managed Identity.
- BA custom Azure AD application registration.
- CAn Enterprise application.
- DAn Azure AD user account.
Show answer & explanationAnswer & explanation
Correct answer: C. An Enterprise application.
Integrating a pre-integrated SaaS application like DocuSign for Single Sign-On (SSO) in Azure AD is typically done by adding an 'Enterprise application'. These applications are often pre-configured with the necessary settings for common protocols like SAML 2.0, simplifying the integration process significantly.
Why the other options are wrong
- A. Managed Identities are for Azure services to authenticate to other Azure services, not for integrating external SaaS applications for user SSO.
- B. A custom Azure AD application registration is used for custom-developed applications or when an 'Enterprise application' template doesn't exist. While technically possible, it's more complex than necessary for a known SaaS app.
- D. An Azure AD user account represents a human user, not an application's identity for SSO integration.
Azure AD Enterprise Application
An object in Azure AD representing a pre-integrated SaaS application or an application published for use by users in the organization, primarily for single sign-on (SSO) and user provisioning.
- Used for integrating SaaS apps like Salesforce, Workday, DocuSign.
- Often comes with pre-configured templates for SSO protocols (SAML, OpenID Connect).
- Enables central management of access and user provisioning.
- Can represent both custom-developed applications and pre-integrated ones.
Memory trick: Enterprise Enables Easy External Engagement.