Microsoft Certified: Identity and Access Administrator AssociateImplement an identity management solutionEasy
A company is onboarding a large number of external contractors who need temporary access to specific applications in Azure AD. These contractors do not have existing Microsoft accounts or Azure AD accounts. The company wants to streamline the onboarding process by allowing the contractors to use their existing corporate email addresses (e.g., Gmail, Yahoo) to sign in. Which feature allows this type of external identity access?
- AAzure AD B2B collaboration guest accounts
- BAzure AD External Identities user flows
- CAzure AD Managed Identities
- DAzure AD B2C tenant
Show answer & explanationAnswer & explanation
Correct answer: A. Azure AD B2B collaboration guest accounts
Azure AD B2B collaboration allows you to invite external users as guest users to your Azure AD tenant. These guest users can then sign in using their own identity providers, such as a Google account, a Microsoft account, or another organization's Azure AD.
Why the other options are wrong
- B. User flows are part of Azure AD B2C or External Identities for self-service sign-up/sign-in, but B2B collaboration is the direct mechanism for inviting guests to an existing tenant.
- C. Managed Identities are for Azure resources to authenticate to services, not for human users.
- D. Azure AD B2C is for customer-facing applications, managing millions of customer identities, not primarily for inviting partner contractors.
Azure AD B2B Collaboration
A feature of Azure AD that allows you to invite external users (guests) to your tenant to access applications and resources.
- Guests can use their own credentials (Azure AD, Microsoft account, Google, federated identity).
- Administrators manage guest user access within their own tenant.
- Facilitates secure collaboration with partners and vendors.
Memory trick: External: B2B for guests, B2C for customers, Managed for services.