AZ-104 Question 13
Single answerYou are an Azure Administrator for Contoso. The company is partnering with an external vendor, Fabrikam, which manages its own Azure Active Directory tenant. Contoso wants Fabrikam employees to securely access a shared Microsoft Teams channel in Contoso’s environment using their existing Fabrikam credentials. Which feature should you configure in Azure to meet these requirements?
- A
Enable Azure AD business-to-business (B2B) collaboration
- B
Set up an Azure AD B2C tenant for Fabrikam users
- C
Deploy Azure AD Domain Services for Fabrikam
- D
Create a trust relationship in the on-premises Active Directory
Show answer and explanation
Correct answer: A
Explanation
Azure AD B2B collaboration is designed to integrate external users who already have their own Azure AD credentials. By inviting Fabrikam users through B2B, they can use their existing accounts to access Contoso’s Teams channel without having to create and manage additional accounts in the Contoso tenant.
- A. Correct.
Azure AD B2B collaboration allows external users to authenticate with their existing credentials while accessing resources in your tenant. This specifically addresses the scenario of inviting and managing external identities with minimal overhead.
- B. Incorrect.
Azure AD B2C is primarily designed to authenticate end users (often consumers and customers) for customer-facing applications, not for onboarding external corporate users from a partner organization’s Azure AD tenant.
- C. Incorrect.
Azure AD Domain Services is used to provide domain services like Kerberos authentication or NTLM for legacy apps in the cloud. It does not address cross-tenant collaboration functionality.
- D. Incorrect.
Creating a trust relationship in on-premises Active Directory would require on-prem to on-prem trust configuration, which can be overly complex and does not leverage Azure AD’s native external collaboration features.