Examkin

Soru

Zorluk: ZorMulti-tenant Applications Configuration

You are developing a multi-tenant SaaS application that will be registered in Microsoft Entra ID. The application must allow users from any corporate Microsoft Entra ID tenant to sign in using their work or school accounts. However, users with personal Microsoft accounts (such as Outlook.com or Xbox Live) must be prevented from signing in. Which of the following configuration actions must you perform to meet these requirements? (Select TWO.)

  1. Configure the signInAudience property in the application manifest to AzureADMultipleOrgs.Cevap
  2. Configure the authority endpoint in the application code to use the /organizations tenant placeholder.Cevap
  3. C
    Configure the signInAudience property in the application manifest to AzureADandPersonalMicrosoftAccount.
  4. D
    Configure the authority endpoint in the application code to use the /common tenant placeholder.

Cevap

Configure the signInAudience property in the application manifest to AzureADMultipleOrgs, and configure the authority endpoint in the application code to use the /organizations tenant placeholder.
To limit authentication to work or school accounts from any Microsoft Entra ID directory while excluding personal Microsoft accounts, you must set the application registration's manifest signInAudience property to AzureADMultipleOrgs and route sign-ins through the /organizations endpoint. This combination guarantees that only corporate identities can authenticate.

Adım Adım Çözüm

1
Determine the required audience type for the multi-tenant application based on the identity restrictions.
Since personal Microsoft accounts must be excluded while corporate accounts are allowed, the target audience configuration value is AzureADMultipleOrgs.
The AzureADMultipleOrgs setting limits sign-ins strictly to corporate tenant environments and prevents personal Microsoft account validation.
2
Select the matching endpoint routing for the client-side authentication library.
The authority URI path must use the /organizations endpoint.
The /organizations path filters incoming sign-ins to only allow organizational directories, complementing the AzureADMultipleOrgs manifest setting.

Anahtar Kavram

Configuring multi-tenant Microsoft Entra ID applications with restricted sign-in audiences and endpoints
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Multi-tenant Applications Configuration

Bu konudan daha fazla soru