Examkin

Soru

Zorluk: OrtaMulti-tenant Applications Configuration

A developer is configuring a multi-tenant web application in Microsoft Entra ID. The application manifest has the signInAudience parameter configured as AzureADMultipleOrgs. The developer wants to configure the authentication middleware in the application to redirect users to the correct Microsoft identity platform endpoint so that users from any organizational tenant can sign in, but personal Microsoft accounts (such as Xbox or Outlook accounts) are excluded. Which authority URL should the developer configure for the authentication endpoint?

  1. https://login.microsoftonline.com/organizationsCevap
  2. B
    https://login.microsoftonline.com/common
  3. C
    https://login.microsoftonline.com/consumers
  4. D
    https://login.microsoftonline.com/contoso.onmicrosoft.com

Cevap

https://login.microsoftonline.com/organizations
The authority URL containing 'organizations' is the correct endpoint because it allows users with work or school accounts from any Microsoft Entra ID tenant to authenticate, matching the AzureADMultipleOrgs configuration and successfully excluding personal Microsoft accounts.

Adım Adım Çözüm

1
Analyze the signInAudience setting in the application manifest.
The signInAudience is set to AzureADMultipleOrgs, which corresponds to multi-tenant organization accounts only.
This configuration indicates that only work and school accounts from any Microsoft Entra ID tenant should be allowed, and personal Microsoft accounts must be excluded.
2
Evaluate the available Microsoft identity platform authority endpoints.
The /organizations endpoint maps directly to AzureADMultipleOrgs. The /common endpoint maps to AzureADandPersonalMicrosoftAccount. The /consumers endpoint maps to PersonalMicrosoftAccount.
Choosing the correct endpoint ensures that the authentication requests are routed to the proper account pool in compliance with the manifest's signInAudience.
3
Select the authority URL that matches the /organizations endpoint.
The authority URL is https://login.microsoftonline.com/organizations.
This URL correctly restricts sign-in to organizational directories and matches the multi-tenant configuration.

Anahtar Kavram

Microsoft identity platform multi-tenant endpoints and signInAudience configuration
Bu soruyu puanla

Konular

Multi-tenant Applications Configuration

Bu konudan daha fazla soru