SC-300 Certification Practice Question #80

Question

You have a Microsoft Entra tenant named contoso.com that contains an enterprise application named App1.

A contractor uses the credentials of user1@outlook.com.

You need to ensure that you can provide the contractor with access to App1. The contractor must be able to authenticate as user1@outlook.com.

What should you do?

Accepted Answer

The contractor must authenticate with their existing `user1@outlook.com` (personal Microsoft) account, so they need to be added to contoso.com as a B2B collaboration guest rather than getting a new contoso identity. `New-MgInvitation` (Microsoft.Graph.Identity.SignIns) creates a B2B invitation that adds the external user to the organization, after which the guest can be assigned to App1 and signs in with their own outlook.com credentials. `New-MgUser` would create a new internal member object (a different identity), adding a custom domain or implementing Entra Connect sync addresses unrelated scenarios (on-premises directory synchronization). Suggested Answer, the Most Voted choice, and MS Learn all agree, with no dissent.

More SC-300 practice questions