Microsoft Certified: Azure Security Engineer AssociateManage identity and accessMedium
A global consulting firm uses Azure AD for its identity management. They have a requirement to allow certain external users, specifically contractors from partner organizations, to access specific internal applications. These contractors do not have Microsoft accounts or Azure AD accounts in their own organizations. You need to implement a solution that allows these contractors to authenticate using their existing Google identities to access the firm's Azure AD-integrated applications. Which Azure AD feature should you configure?
- AAzure AD B2B Collaboration with Google federation
- BAzure AD B2C with local accounts
- CAzure AD B2B Collaboration with SAML/WS-Fed identity providers
- DAzure AD B2C with Google social identity provider
Show answer & explanationAnswer & explanation
Correct answer: A. Azure AD B2B Collaboration with Google federation
Azure AD B2B Collaboration with Google federation allows external users with Google accounts to sign in to your Azure AD applications. This is suitable for partner collaboration where external users maintain their existing identities.
Why the other options are wrong
- B. Azure AD B2C is primarily for consumer-facing applications and managing customer identities, not for B2B collaboration with existing partner identities.
- C. SAML/WS-Fed is for enterprise identity providers, not individual Google accounts.
- D. Azure AD B2C is for consumer identity management, not for inviting partner organization members to access internal applications.
Azure AD B2B Collaboration with Social IdPs
Azure AD B2B Collaboration allows you to invite external users to your Azure AD tenant. When configured with social identity providers like Google, these external users can sign in using their existing social accounts.
- Enables collaboration with users outside your organization.
- Supports various identity providers, including Google and Microsoft accounts.
- Guest users are represented in your directory and can be assigned access to applications and resources.
Memory trick: B2B for Business Partners, B2C for Customers.