AZ-120 · Question #410
You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named contoso.com. You have an on-premises deployment of SAP Landscape Management (LaMa). You need to ensure that…
The correct answer is A. a user-assigned managed identity in Sub1. A Microsoft Entra ID app registration is used as a component of an on-premises SAP Landscape Management (LaMa) integration to manage SAP resources, specifically by providing an on- premises provisioning agent that communicates with the SAP systems via a SCIM endpoint. The app…
Question
You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named contoso.com. You have an on-premises deployment of SAP Landscape Management (LaMa). You need to ensure that the on-premises LaMa deployment is authorized to manage the SAP resources provisioned to Sub1. What should you create first?
Options
- Aa user-assigned managed identity in Sub1
- Ba system-assigned managed identity in Sub1
- Can app registration in contoso.com
- Dan external identity provider in contoso.com
How the community answered
(19 responses)- A74% (14)
- B5% (1)
- C16% (3)
- D5% (1)
Explanation
A Microsoft Entra ID app registration is used as a component of an on-premises SAP Landscape Management (LaMa) integration to manage SAP resources, specifically by providing an on- premises provisioning agent that communicates with the SAP systems via a SCIM endpoint. The app registration is configured with a client secret and application ID that serve as credentials for the agent to authenticate and provision users and groups from Entra ID to the on-premises SAP App registration is a credential source: An app registration in Microsoft Entra ID provides the necessary credentials (application ID and client secret) for the on-premises provisioning agent to authenticate with Entra ID. On-premises provisioning agent: This agent is a component that connects on-premises applications to the Microsoft Entra provisioning service. It translates SCIM operations from Entra ID into actions for the on-premises systems, such as LDAP, SQL, or custom ECMA calls. SCIM protocol: The agent uses the SCIM 2.0 protocol to communicate with the target SAP application's SCIM endpoint, which is the standard for automating user provisioning. Management of SAP resources: By using this integration, SAP LaMa can manage SAP resources. This includes the automation of user and group provisioning into SAP systems, which is a key part of the overall management process. End-to-end solution: This integration enables a complete end-to-end solution for identity and access management, allowing LaMa to work with Microsoft Entra ID to manage the full lifecycle of users within SAP environments. https://learn.microsoft.com/en-us/entra/identity/app-provisioning/how-provisioning-works
Topics
Community Discussion
No community discussion yet for this question.