An organization is configuring Microsoft Entra ID to support various corporate and external collaboration requirements. Match each administrative requirement on the left to its corresponding minimum configuration or licensing setting on the right.
- Restrict guest users from searching the directory and inviting other guests, while permitting member users who do not have directory administrator roles to invite guests.Set guest invite settings to 'Member users and users assigned to specific admin roles can invite guest users' in External Collaboration settings.
- Allow external users to self-register for a corporate web application, authenticate using their Google accounts, and automatically receive a dynamic group membership.Configure a Google Identity Provider, create a self-service sign-up user flow, and assign Microsoft Entra ID P1 licenses to support dynamic groups.
- Ensure that when cloud-only users reset their passwords, they must provide both a mobile app notification and a security question, and this capability must only be enabled for members of a specific department.Set SSPR enablement to 'Selected' for a group, select Microsoft Entra ID P1 licenses, and choose Mobile app notification and Security questions as authentication methods.
- Enable users synchronized from on-premises AD to perform SSPR, ensuring their passwords are changed in the on-premises directory and that custom banned passwords are blocked on-premises.Enable password writeback in Microsoft Entra Connect, deploy Microsoft Entra Password Protection agents on domain controllers, and assign Microsoft Entra ID P1 licenses.
Cevap
Match the requirements as follows: 1) Restrict guest invites to members/admins matches Guest Invite settings set to member users and specific admin roles. 2) Google self-register with dynamic groups matches Google Identity Provider, self-service user flow, and Microsoft Entra ID P1. 3) Scoped SSPR with mobile app/security questions matches SSPR enabled for Selected group, P1 licenses, and the selected auth methods. 4) Hybrid SSPR with custom banned passwords matches on-premises writeback in Entra Connect, Entra Password Protection agents, and P1 licenses.
Matching each scenario correctly requires understanding Microsoft Entra ID features and licensing tiers. Scoped SSPR, Dynamic Groups, Password Writeback, and Microsoft Entra Password Protection all require Microsoft Entra ID P1. Guest invitation restrictions are handled under External Collaboration settings, and external self-service sign-up utilizes User Flows paired with external Identity Providers like Google.
Adım Adım Çözüm
Anahtar Kavram
Microsoft Entra ID Self-Service Password Reset (SSPR) licensing, scoping, authentication methods, hybrid writeback, and External Collaboration B2B guest invitation and user flow settings.