Microsoft Cybersecurity Architect (SC-100)Design a Zero Trust strategy and architectureEasy
A global manufacturing company is implementing a Zero Trust strategy. They have recently acquired a smaller company that uses its own on-premises Active Directory and email system. The larger company needs to provide the acquired company's employees with access to certain corporate applications hosted in Azure AD, without migrating their identities or requiring them to create new accounts. Which Azure AD capability should the security architect leverage?
- AAzure AD Application Proxy
- BAzure AD B2B Collaboration
- CAzure AD Connect
- DAzure AD Domain Services
Show answer & explanationAnswer & explanation
Correct answer: B. Azure AD B2B Collaboration
Azure AD B2B Collaboration allows organizations to securely share applications and services with external users (guests) from any organization, including those with their own on-premises Active Directory. Guests can use their existing credentials to access resources without creating new accounts in the host tenant.
Why the other options are wrong
- A. Azure AD Application Proxy provides secure remote access to on-premises web applications for *internal* users and B2B guests, but B2B is the core capability for managing the external identities.
- C. Azure AD Connect synchronizes identities between on-premises AD and Azure AD within the *same* organization, not for external collaboration.
- D. Azure AD Domain Services provides managed domain services for Azure VMs, not for external user collaboration.
Azure AD B2B Collaboration
A feature of Azure Active Directory that enables organizations to securely collaborate with external users (partners, customers, acquired company employees) by allowing them to use their own identities to access company resources.
- External users use their existing identities (e.g., corporate AD, Google, Microsoft accounts).
- No need to create new accounts in the inviting organization's tenant.
- Integrates with Conditional Access policies.
- Facilitates secure sharing of applications and resources.
Memory trick: B2B: Business to Business, bring your own ID.