You are configuring a multi-tenant web application in Microsoft Entra ID. The application must allow users with work or school accounts from any organization's tenant to log in, but must exclude personal Microsoft accounts. Which two configurations are required to meet these requirements? Select two.
- Set the signInAudience property in the application manifest to AzureADMultipleOrgsCevap
- Configure the authority URI to use the /organizations endpointCevap
- CSet the signInAudience property in the application manifest to AzureADMyOrg
- DConfigure the authority URI to use a tenant-specific endpoint containing your home tenant ID
Cevap
Set the signInAudience property in the application manifest to AzureADMultipleOrgs and configure the authority URI to use the /organizations endpoint.
To configure a multi-tenant application that supports work and school accounts from any organization but excludes personal accounts, you must set the signInAudience to AzureADMultipleOrgs and use the /organizations endpoint. The /organizations endpoint is specifically designed for work or school accounts from any Microsoft Entra ID tenant, whereas the /common endpoint would also include personal Microsoft accounts.
Adım Adım Çözüm
Anahtar Kavram
Configuring multi-tenant Microsoft Entra ID applications requires setting the appropriate signInAudience parameter in the application manifest and using the correct authority endpoint to filter user accounts.