Exam AZ-500 topic 2 question 117 discussion

I would go for D Link: https://learn.microsoft.com/en-us/entra/external-id/identity-providers

The word cross-"tenant" alone indicates that it is a MS Entra ID only thing!

A Cross Tenant access is only for External Entra ID tenants. Refer to this video at minute 8:35 (the screen says the same thing) https://www.youtube.com/watch?v=3Pi_-pHIT_4

The three of them can be granted access through B2B !!!!BUT!!!! not for cross-tenant access settings!

Cross-tenant access settings for B2B collaboration in Microsoft Entra ID allow secure and managed collaboration between different Microsoft Entra tenants. However, only Microsoft Entra ID supports cross-tenant access settings. Other identity providers, such as Google Cloud Platform (GCP) and Microsoft accounts (personal accounts like Outlook.com or Hotmail.com), do not support cross-tenant access settings in Microsoft Entra ID.

To support the Answer: fabrikam.com uses multiple identity providers (GCP, Microsoft accounts, and Microsoft Entra ID), only their Microsoft Entra ID identities will be able to leverage the cross-tenant access settings for B2B collaboration with your contoso.com tenant. Google Cloud Platform (GCP) and Microsoft accounts are not directly supported for cross-tenant access in this context. For cross-tenant access settings in B2B collaboration between your Microsoft Entra tenant (contoso.com) and the partner organization's tenant (fabrikam.com), only Microsoft Entra ID is supported as the identity provider. Cross-tenant access settings are specifically designed for collaboration between Microsoft Entra organizations. They allow you to configure inbound and outbound access policies, trust multifactor authentication (MFA), and device claims from other Microsoft Entra tenants. Answer = A

B2B collaboration lets you invite external partners to access your Microsoft, SaaS, or custom-developed apps. B2B collaboration is especially useful when the external partner doesn't use Microsoft Entra ID or it's not practical or possible to set up B2B direct connect. B2B collaboration allows external users to sign in using their preferred identity, including their Microsoft Entra account, consumer Microsoft account, or a social identity you enable such as Google. With B2B collaboration, you can let external users sign in to your Microsoft applications, SaaS apps, custom-developed apps, and so on. https://learn.microsoft.com/en-us/entra/external-id/b2b-direct-connect-overview

For external Id : Ms entra id, a Microsoft email account , one time passcode via email of your choice , google, facebook , SAML, and I think apple too Not sure about apple though, read that somewhere

https://learn.microsoft.com/en-us/entra/external-id/cross-tenant-access-settings-b2b-collaboration

Answer: A Cross-tenant access settings is for B2B collaboration between Microsoft Entra organisations. https://learn.microsoft.com/en-us/entra/external-id/cross-tenant-access-settings-b2b-collaboration

"You need to *configure the Cross-tenant access settings* for B2B collaboration." - although Microsoft Account can share files with other providers, you can't set up any global settings/policies. each share must be separately configured during creation. thus C makes most sense - these are 'corporate solutions' giving ability to be configured (settings set).

"Cross-TENANT access" is about other [Entra] tenants. Of course you can establish trusts with Google Cloud etc., but you cannot grant access to the Google Cloud users already trusted by the other tenant.

another not clear question: if the question is "You need to configure the Cross-tenant "access settings*" I will go for A, only Entra ID tenant supports cross-tenant access settings (like trust settings). If the question is "You need to configure the Cross-tenant access" I will go for D: I can create B2B configuration for all the listed providers

another not clear question: if the question is "You need to configure the Cross-tenant "access settings*" I will go for A, only Entra ID tenant supports cross-tenant access settings (like trust settings). If the question is "You need to configure the Cross-tenant access" I will go for D: I can create B2B configuration for all the listed providers

D. GCP (Google Cloud Platform, referred to as Google federation), Microsoft accounts, and Microsoft Entra ID. - The identity providers that support cross-tenant access settings for B2B collaboration in Microsoft Entra include Microsoft Entra ID, Microsoft accounts, and Google federation. This means you can configure cross-tenant access to allow guest users to authenticate using their Microsoft Entra accounts, personal Microsoft accounts, or their Google accounts.

I go with C) GCP accounts are associated with Google Cloud services. they are not directly used for Microsoft Entra cross-tenant collaboration. Within a single tenant it is possible to invite a GCP user but it is not possible to be used for cross tenant scenarios