An application named App1 needs to be configured in Microsoft Entra ID. The application will be consumed by multiple external business partners who use their own corporate Entra ID directories, alongside external consultants who will sign in using their personal Microsoft accounts.
Which two configurations are required to support this authentication requirement? (Select two.)
- Set the signInAudience property in the application manifest to AzureADandPersonalMicrosoftAccountCevap
- Use the common endpoint in the authority URI for user authenticationCevap
- CSet the signInAudience property in the application manifest to AzureADMultipleOrgs
- DUse the organizations endpoint in the authority URI for user authentication
Cevap
To support authentication for users from any corporate Entra ID tenant as well as personal Microsoft accounts, you must set the signInAudience property in the application manifest to AzureADandPersonalMicrosoftAccount and use the common endpoint in the authority URI for user authentication.
To support both multi-tenant organizational users and personal Microsoft accounts, the signInAudience parameter in the application manifest must be set to AzureADandPersonalMicrosoftAccount. In addition, the application's authentication configuration must point to the common endpoint (https://login.microsoftonline.com/common) because it routes both organizational and personal accounts, unlike the organizations endpoint which only routes organizational accounts.
Adım Adım Çözüm
Anahtar Kavram
Configuring multi-tenant Microsoft Entra ID applications to support both organizational accounts and personal Microsoft accounts.