Examkin

Question

Difficulty: EasyMulti-tenant Applications Configuration

You are developing a multi-tenant web application that must allow users from any Microsoft Entra ID tenant to sign in using their work or school accounts. Personal Microsoft accounts (such as outlook.com or xbox.com) must be prevented from signing in. Which two configurations must you implement to meet these requirements? (Select TWO)

  1. Set the signInAudience property in the application manifest to AzureADMultipleOrgs.Answer
  2. Configure the authority URI in the application code to use the organizations endpoint.Answer
  3. C
    Set the signInAudience property in the application manifest to AzureADMyOrg.
  4. D
    Configure the authority URI in the application code to use the common endpoint.

Answer

Set the signInAudience property in the application manifest to AzureADMultipleOrgs, and configure the authority URI in the application code to use the organizations endpoint.
To support multi-tenant login restricted to work or school accounts, the application's registration manifest must have the signInAudience set to AzureADMultipleOrgs. In the application code, the authentication flow must target the organizations endpoint, which ensures that personal accounts are blocked during the authentication process.

Step-by-Step Solution

1
Configure the application registration audience constraint in Entra ID.
Setting the signInAudience property to AzureADMultipleOrgs allows any organization tenant to sign in, but excludes personal accounts.
The AzureADMultipleOrgs setting is explicitly designed for multi-tenant applications that restrict access to work or school accounts.
2
Update the authentication authority endpoint in the application code.
Setting the endpoint path to organizations redirects authenticating users to the organization-specific login flow.
The organizations endpoint filters out personal accounts, whereas the common endpoint allows both organizational and personal accounts to sign in.

Key Concept

Multi-tenant Applications Configuration in Microsoft Entra ID
Estimated Time:1m 0s
Rate this question

Topics

Multi-tenant Applications Configuration

More questions from this topic