You have a Microsoft Azure Active Directory (Azure AD) tenant named contoso.com. You add an app named App1 to the enterprise applications in contoso.com. You need to configure self-service app access for App1. What should you do first?
In Azure AD > Enterprise Application, creating a new application the first suggested step is to enable SSO to allow user log-in the application using Azure AD credentials. Provisioning mode is set to manual by default and can be left as is. When opening the self-service pane, in addition, you are prompted to configure SSO before.
The right answer should be D therefore.
Dont know what everybody who are calling for D are looking at!
We have lots of Enterprise application in AzureAD and most are not configured with SSO.
I can just go to Self-service and enable the option to allow users to request access to the application and leaving the second option to require approval before granting to No.
That SSO is the first suggested step after creating an application does not mean anything. Being prompted to configure SSO when opening the self-service pane does not make any sense and probably F_M is experiencing an prompt for MFA or just credentials.
SSO is not a requirement for Enterprise apps and also not a prerequisit for enabling automatic self-service.
here you can see how it works. I checked this with one of our apps called Smartsheets that supports provisioning and has no SSO enabled. I can change the provisioning mode from manual to automatic
https://www.youtube.com/watch?v=k2_fk7BY8Ow&ab_channel=MicrosoftSecurity
If you try to setup Self service with out SSO you will receive this message "Configure single sign-on to this application to use Self-service Application Access"
I agree with Digida for two reasons.
1. When I deploy a new Enterprise Application in my lab, under the App1 Overview this is the text for the Self service box, "Enable users to request access to the application using their Azure AD credentials". It says Azure AD credentials not SSO, these two items are not mutually exclusive, but you would specify SAML/SSO if that was a requirement.
2. In the Microsoft doc for Enable self-service application assignment, it says nothing about SSO in the Prerequisites section either.
To enable self-service application access, you need:
-An Azure account with an active subscription.
-One of the following roles: Global Administrator, Cloud Application Administrator, Application Administrator, or owner of the service principal.
-An Azure Active Directory Premium (P1 or P2) license is required for users to request to join a self-service app and for owners to approve or deny requests.
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/manage-self-service-access
Wouldn't the provided answer be correct? The default provisioning method is manual so you would first have to change it to Self-Service. While some have pointed out that when creating any Ent App it prompts you to setup SSO, but it is not required to be setup before switching the provisioning method.
If you create a new Ent. App and select "Self-service" you see a message: "Configure single sign-on to this application to use Self-service Application Access"
This type of key, showing not only why the right answer is right, but why each of the wrong answers is wrong, is just so good. \m/
upvoted 5 times
...
This section is not available anymore. Please use the main Exam Page.MS-100 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
F_M
Highly Voted 4 years, 1 month agoF_M
4 years, 1 month agoStartkabels
Highly Voted 2 years, 7 months agoStartkabels
2 years, 7 months agomrwhite
Most Recent 2 years, 1 month agoIvantor
2 years, 7 months agoFeyenoord
2 years, 4 months agoT10T
2 years, 10 months agoDigida
2 years, 11 months agomanis73
3 years agoAbdulrahman_Salah_2021
3 years, 2 months agoAlv86
3 years, 3 months agoBDuff
3 years, 5 months agoTimurKazan
3 years, 8 months agoitstudy369
4 years agoPeterC
4 years agoafbnfz
4 years, 1 month ago