Microsoft 365 Certified Endpoint Administrator (MD-102) Practice Test

Which identity management solution is recommended for providing Single Sign-On to cloud-based applications?

1. Built-in AAD identities

2. External identity providers like Google or Facebook

3. Hybrid identity systems

4. Standalone accounts for each user

The correct answer is: Built-in AAD identities

The recommended identity management solution for providing Single Sign-On (SSO) to cloud-based applications is built-in Azure Active Directory (AAD) identities. Azure Active Directory serves as a robust identity platform that allows users to authenticate once and gain access to multiple applications without needing to log in separately to each one. This not only streamlines the user experience but also enhances security by reducing the number of passwords that need to be managed. Built-in AAD identities seamlessly integrate with Microsoft 365 and other cloud applications, providing a unified identity management solution. They support various authentication protocols and modern security features, such as Multi-Factor Authentication (MFA) and Conditional Access. By using AAD for SSO, organizations can simplify user access management and ensure that their users have a smooth and secure experience when accessing different services. The other choices do not align as closely with the SSO functionality offered by AAD. External identity providers like Google or Facebook can facilitate access to certain applications but don’t provide the same level of integration or management capabilities as AAD. Hybrid identity systems can offer SSO but are typically more complex to implement and manage, requiring both on-premises and cloud resources. Standalone accounts for each user may provide a simple solution but do not offer the