Examkin

Question

Difficulty: EasyMulti-tenant Applications Configuration

An organization registry application built in Microsoft Entra ID needs to support authentication for business users from external directories. The registration must allow log-in capabilities exclusively for corporate credentials across any Microsoft Entra ID tenant, preventing personal email accounts (such as Hotmail or Outlook.com) from authenticating. To implement this restriction, which setting should be selected for the application registration's sign-in audience in the manifest?

  1. AzureADMultipleOrgsAnswer
  2. B
    AzureADMyOrg
  3. C
    AzureADandPersonalMicrosoftAccount
  4. D
    AzureADandOrganizations

Answer

AzureADMultipleOrgs
The value AzureADMultipleOrgs is used in the Microsoft Entra ID application manifest to allow sign-ins from any organizational directory (work or school accounts) while preventing users with personal Microsoft accounts from signing in.

Step-by-Step Solution

1
Analyze the identity requirements for the registry application.
The application must support multi-tenant work/school accounts but exclude personal Microsoft accounts.
This determines the scope of the target identity providers.
2
Identify the corresponding Microsoft Entra ID application manifest property for audience configuration.
The target property is signInAudience.
This property controls which accounts are allowed to sign in to the application.
3
Select the correct value for the property.
AzureADMultipleOrgs is the value that enables multi-tenant work or school accounts while excluding personal accounts.
Choosing this specific value ensures compliance with the target security boundary.

Key Concept

Multi-tenant Applications Configuration
Rate this question

Topics

Multi-tenant Applications Configuration

More questions from this topic