SC-100 · Question #82
A customer uses Azure to develop a mobile app that will be consumed by external users as shown in the following exhibit. You need to design an identity strategy for the app. The solution must meet…
The correct answer is A. Azure Active Directory (Azure AD) B2C. Azure Active Directory B2C (Business-to-Consumer) (A) is the correct service because it is purpose-built for external-facing consumer applications and satisfies all three requirements. It natively supports social identity providers including Google, Facebook, and Microsoft…
Question
A customer uses Azure to develop a mobile app that will be consumed by external users as shown in the following exhibit. You need to design an identity strategy for the app. The solution must meet the following requirements:
- Enable the usage of external IDs such as Google, Facebook, and
Microsoft accounts.
- Be managed separately from the identity store of the customer.
- Support fully customizable branding for each app.
Which service should you recommend to complete the design?
Exhibit
Options
- AAzure Active Directory (Azure AD) B2C
- BAzure Active Directory (Azure AD) B2B
- CAzure AD Connect
- DAzure Active Directory Domain Services (Azure AD DS)
How the community answered
(25 responses)- A80% (20)
- B4% (1)
- C12% (3)
- D4% (1)
Explanation
Azure Active Directory B2C (Business-to-Consumer) (A) is the correct service because it is purpose-built for external-facing consumer applications and satisfies all three requirements. It natively supports social identity providers including Google, Facebook, and Microsoft accounts. It operates as a completely separate tenant from the customer's organizational Azure AD, so it is managed independently from the corporate identity store. It also supports fully customizable user interface branding per application using custom HTML/CSS policies. Azure AD B2B (B) is for inviting external partner or guest users to collaborate within the customer's own tenant - not for consumer-facing apps with social logins. Azure AD Connect (C) is a synchronization tool for hybrid identity between on-premises AD and Azure AD. Azure AD Domain Services (D) provides managed domain services (LDAP, Kerberos) for legacy app compatibility, not consumer identity management.
Topics
Community Discussion
No community discussion yet for this question.