You manage an Azure Active Directory (AD) tenant
You plan to allow users to log in to a third-party application by using their Azure AD credentials.
To access the application, users will be prompted for their existing third-party user names and passwords.You need to add the application to Azure AD.
Which type of application should you add?
A.
Existing Single Sign-On with identity provisioning
B.
Password Single Sign-On with identity provisioning
C.
Existing Single Sign-On without identity provisioning
D.
Password Single Sign-On without identity provisioning
Explanation:
* Azure AD supports two different modes for single sign-on:
/ Federation using standard protocols
Configuring Federation-based single sign-on enables the users in your organization to be automatically
signed in to a third-party SaaS application by Azure AD using the user account information from Azure AD.
/ Password-based single sign-on
* Support for user provisioning
User provisioning enables automated user provisioning and deprovisioning of accounts in third-party SaaS
applications from within the Azure Management Portal, using your Windows Server Active Directory or
Azure AD identity information. When a user is given permissions in Azure AD for one of these applications,
an account can be automatically created (provisioned) in the target SaaS application.Application access enhancements for Azure AD
URL: http://msdn.microsoft.com/en-us/library/azure/dn308588.aspx
Tiz – D
No provision required , so no A or B
Not C as there is no prompt when the user accesses the link created for Existing sign-on
D – User accesses the App and is prompted for username & password , no need to provision as already provisioned in Azure AD. will be prompted once due to single sign on
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-appssoaccess-whatis
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-app-provisioning
0
0
How does single sign-on with Azure Active Directory work?
When a user “signs in” to an application, they go through an authentication process where they are required to prove that they are who they say they are. Without single sign-on, this is typically done by entering a password that is stored at the application, and the user is required to know this password.
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-saas-app-provisioning
I would go for A.
0
0