Examkin

Soru

Zorluk: KolayMulti-tenant Applications Configuration

An organization registry application built in Microsoft Entra ID needs to support authentication for business users from external directories. The registration must allow log-in capabilities exclusively for corporate credentials across any Microsoft Entra ID tenant, preventing personal email accounts (such as Hotmail or Outlook.com) from authenticating. To implement this restriction, which setting should be selected for the application registration's sign-in audience in the manifest?

  1. AzureADMultipleOrgsCevap
  2. B
    AzureADMyOrg
  3. C
    AzureADandPersonalMicrosoftAccount
  4. D
    AzureADandOrganizations

Cevap

AzureADMultipleOrgs
The value AzureADMultipleOrgs is used in the Microsoft Entra ID application manifest to allow sign-ins from any organizational directory (work or school accounts) while preventing users with personal Microsoft accounts from signing in.

Adım Adım Çözüm

1
Analyze the identity requirements for the registry application.
The application must support multi-tenant work/school accounts but exclude personal Microsoft accounts.
This determines the scope of the target identity providers.
2
Identify the corresponding Microsoft Entra ID application manifest property for audience configuration.
The target property is signInAudience.
This property controls which accounts are allowed to sign in to the application.
3
Select the correct value for the property.
AzureADMultipleOrgs is the value that enables multi-tenant work or school accounts while excluding personal accounts.
Choosing this specific value ensures compliance with the target security boundary.

Anahtar Kavram

Multi-tenant Applications Configuration
Bu soruyu puanla

Konular

Multi-tenant Applications Configuration

Bu konudan daha fazla soru