Microsoft Certified: Identity and Access Administrator AssociateImplement an authentication and access management solutionHard
A large enterprise with multiple subsidiary companies, each with its own Azure AD tenant, is implementing a new cross-company collaboration portal. Users from any subsidiary should be able to authenticate to the portal and access shared resources located in the main corporate tenant using their existing credentials from their respective home tenants. The solution must support seamless collaboration and centralized management of access policies. Which Azure AD feature is best suited for establishing this trust relationship?
- AAzure AD Multi-tenant Organization (MTO)
- BAzure AD Application Proxy
- CAzure AD Connect Health
- DAzure AD B2B collaboration
Show answer & explanationAnswer & explanation
Correct answer: A. Azure AD Multi-tenant Organization (MTO)
Azure AD Multi-tenant Organization (MTO) is designed specifically for scenarios involving multiple Azure AD tenants within the same enterprise (e.g., subsidiaries). It provides seamless cross-tenant collaboration, shared resource access, and centralized policy management, which is a more robust solution than B2B for this specific use case.
Why the other options are wrong
- B. Azure AD Application Proxy provides secure remote access to on-premises web applications, not inter-tenant trust for a cloud-native portal.
- C. Azure AD Connect Health monitors the health of hybrid identity components and is unrelated to establishing inter-tenant trust.
- D. Azure AD B2B collaboration is for inviting external users (guests) from other organizations. While it could technically work, MTO offers a more integrated and seamless experience for intra-organizational subsidiaries.
Azure AD Multi-tenant Organization (MTO)
Azure AD Multi-tenant Organization (MTO) is a feature in Azure AD that enables seamless collaboration and resource sharing across multiple tenants belonging to a single organization (e.g., subsidiaries, mergers).
- Provides a more native, integrated collaboration experience than B2B for intra-organizational tenants.
- Allows users to access resources in other MTO tenants using their home tenant credentials without guest accounts.
- Facilitates centralized management and policy enforcement across member tenants.
- Simplifies cross-tenant administration and resource access.
Memory trick: MTO: Many Tenants, One Organization.