nerdexam
Microsoft

AZ-120 · Question #410

You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named contoso.com. You have an on-premises deployment of SAP Landscape Management (LaMa). You need to ensure that…

The correct answer is A. a user-assigned managed identity in Sub1. A Microsoft Entra ID app registration is used as a component of an on-premises SAP Landscape Management (LaMa) integration to manage SAP resources, specifically by providing an on- premises provisioning agent that communicates with the SAP systems via a SCIM endpoint. The app…

Maintain SAP workloads on Azure

Question

You have an Azure subscription named Sub1 that is linked to a Microsoft Entra tenant named contoso.com. You have an on-premises deployment of SAP Landscape Management (LaMa). You need to ensure that the on-premises LaMa deployment is authorized to manage the SAP resources provisioned to Sub1. What should you create first?

Options

  • Aa user-assigned managed identity in Sub1
  • Ba system-assigned managed identity in Sub1
  • Can app registration in contoso.com
  • Dan external identity provider in contoso.com

How the community answered

(19 responses)
  • A
    74% (14)
  • B
    5% (1)
  • C
    16% (3)
  • D
    5% (1)

Explanation

A Microsoft Entra ID app registration is used as a component of an on-premises SAP Landscape Management (LaMa) integration to manage SAP resources, specifically by providing an on- premises provisioning agent that communicates with the SAP systems via a SCIM endpoint. The app registration is configured with a client secret and application ID that serve as credentials for the agent to authenticate and provision users and groups from Entra ID to the on-premises SAP App registration is a credential source: An app registration in Microsoft Entra ID provides the necessary credentials (application ID and client secret) for the on-premises provisioning agent to authenticate with Entra ID. On-premises provisioning agent: This agent is a component that connects on-premises applications to the Microsoft Entra provisioning service. It translates SCIM operations from Entra ID into actions for the on-premises systems, such as LDAP, SQL, or custom ECMA calls. SCIM protocol: The agent uses the SCIM 2.0 protocol to communicate with the target SAP application's SCIM endpoint, which is the standard for automating user provisioning. Management of SAP resources: By using this integration, SAP LaMa can manage SAP resources. This includes the automation of user and group provisioning into SAP systems, which is a key part of the overall management process. End-to-end solution: This integration enables a complete end-to-end solution for identity and access management, allowing LaMa to work with Microsoft Entra ID to manage the full lifecycle of users within SAP environments. https://learn.microsoft.com/en-us/entra/identity/app-provisioning/how-provisioning-works

Topics

#SAP LaMa#user-assigned managed identity#authorization#on-premises integration

Community Discussion

No community discussion yet for this question.

Full AZ-120 Practice