You have a Microsoft 365 tenant. Your company uses a third-party software as a service (SaaS) app named App1. App1 supports authenticating users by using Microsoft Entra credentials. You need to…

Question

Options

• Aa relying party trust in Active Directory Federation Services (AD FS)
• Ba Microsoft Entra enterprise application
• CMicrosoft Entra Application Proxy
• DMicrosoft Entra External ID

• A
  2% (1)
• B
  90% (37)
• C
  2% (1)
• D
  5% (2)

Explanation

The correct answer is B: a Microsoft Entra enterprise application. When a third-party SaaS app already supports Microsoft Entra (Azure AD) authentication via standards like SAML 2.0 or OIDC, the correct approach is to register it as an enterprise application in Entra ID. This enables SSO so users authenticate once with their Entra credentials and are passed into App1 without a separate login. An AD FS relying party trust (A) is a legacy approach that adds unnecessary infrastructure when Entra can federate directly. Application Proxy (C) is designed to expose on-premises web apps externally-it is not used for cloud SaaS apps that already support Entra authentication. Entra External ID (D) is for B2B/B2C scenarios where external users authenticate to your tenant, not for your users authenticating to an external SaaS app.

No community discussion yet for this question.