Examkin

Question

Difficulty: HardProvision and Configure Azure API Management

An organization requires developer portal authentication for an Azure API Management (APIM) instance using Microsoft Entra ID. To implement this, you must configure the trust relationship between Microsoft Entra ID and the APIM developer portal. What is the correct sequence of steps to configure this identity provider and make it available to portal users?

  1. 1Register an application in Microsoft Entra ID to represent the developer portal, note the Application ID, and generate a client secret.
  2. 2Add the Microsoft Entra ID identity provider to the API Management instance using the Application ID and client secret.
  3. 3Retrieve the redirect URL from the newly added identity provider configuration in the API Management instance.
  4. 4Configure the Authentication settings of the Microsoft Entra ID application registration by adding the retrieved redirect URL.
  5. 5Publish the API Management developer portal to make the identity provider login option visible to users.

Answer

The correct sequence starts with registering the app in Microsoft Entra ID, adding the provider to API Management, retrieving the redirect URL, configuring the redirect URL in Microsoft Entra ID, and finally publishing the developer portal.
The correct sequence follows the logical dependency flow: first, create the identity credentials by registering the application in Microsoft Entra ID. Second, input these credentials into the API Management identity provider configuration, which generates the instance-specific redirect URL. Third, retrieve this redirect URL from API Management. Fourth, configure the application registration in Microsoft Entra ID with the retrieved redirect URL to authorize authentication responses. Lastly, publish the developer portal so that the changes are compiled and the login option becomes active for users.

Step-by-Step Solution

1
Register the application in Microsoft Entra ID.
The Application ID and a client secret are generated.
Establishing the app registration creates the security principal and credentials that APIM will use to authenticate with Entra ID.
2
Add the Microsoft Entra ID identity provider in APIM.
The identity provider is configured, and a redirect URL is generated in the APIM portal.
This links the APIM developer portal to the Entra ID tenant using the credentials registered in the first step.
3
Retrieve the generated redirect URL from the APIM portal.
The redirect URL is copied to the clipboard.
The redirect URL is dynamic and instance-specific, meaning it must be captured from APIM to register it with Entra ID.
4
Add the redirect URL to the Entra ID app registration.
The app registration is updated to allow redirects to the APIM developer portal sign-in endpoint.
For security reasons, Entra ID will only send authentication tokens to pre-authorized redirect URIs.
5
Publish the APIM developer portal.
The portal is compiled and refreshed for visitors.
Any changes to identity providers, designs, or APIs are not visible to users in the developer portal until the portal is explicitly published.

Key Concept

Configuring Microsoft Entra ID authentication for the Azure API Management Developer Portal
Rate this question

Topics

Provision and Configure Azure API Management