06: Implement user authentication and authorization

What does the Microsoft identity platform enable users and customers to sign in with?

Microsoft identities or social accounts

When an application is registered with Microsoft Entra ID, what is automatically created in the home tenant?

Application object and service principal object

What is the purpose of the application object in Microsoft Entra tenant?

It is used as a template to create service principal objects

What is the globally unique ID for an app registered in the Azure portal known as?

App or client ID Signup and view all the answers

Where does the application object reside in the Microsoft Entra tenant?

In the application's 'home' tenant Signup and view all the answers

What can be added in the Azure portal to make an app work and customize its branding?

Secrets or certificates and scopes Signup and view all the answers

What is the purpose of a service principal object in Microsoft Entra tenant?

It represents an instance of the application in a specific tenant Signup and view all the answers

What is the application object similar to in object-oriented programming?

A class Signup and view all the answers

Where is an application's 'home' tenant located?

Where the application was registered Signup and view all the answers

What is used to delegate Identity and Access Management functions to Microsoft Entra ID?

Service principals Signup and view all the answers

What is created in every tenant where the application is used?

Service principal Signup and view all the answers

What does the application object describe?

How the service can issue tokens, resources, and actions of the application Signup and view all the answers

What does the service principal object represent?

Entity requiring access, represented by a security principal Signup and view all the answers

What is the relationship between the application object and service principals?

Application object is the global representation, and service principal is the local representation Signup and view all the answers

How many service principals does a single-tenant application have?

One service principal in its home tenant Signup and view all the answers

What must be created in each tenant where the application is used?

Service principal Signup and view all the answers

What does the security principal define?

Access policy and permissions for the user/application Signup and view all the answers

What does the Microsoft Graph Application entity define the schema for?

Application object's properties Signup and view all the answers

What enables core features such as authentication and authorization during resource access?

Security principal Signup and view all the answers

What serves as the template for creating corresponding service principal objects?

Application object Signup and view all the answers

What does a multi-tenant application have in each tenant where a user has consented to its use?

A service principal Signup and view all the answers

What does a legacy service principal represent?

An app created before app registrations were introduced Signup and view all the answers

What can a service principal representing a managed identity do?

Be granted access and permissions Signup and view all the answers

Where is a service principal representing a managed identity created?

In the tenant where the managed identity is enabled Signup and view all the answers

What defines what an app can actually do in a specific tenant?

The service principal object Signup and view all the answers

What is the method through which a third-party app can access web-hosted resources on behalf of a user in the Microsoft identity platform?

OAuth 2.0 Signup and view all the answers

What is the representation of a permission in the Microsoft identity platform?

String value Signup and view all the answers

What are the sets of permission in OAuth 2.0 often referred to as?

Scopes Signup and view all the answers

What is the identifier for a web-hosted resource that integrates with the Microsoft identity platform?

Application ID URI Signup and view all the answers

What can third-party apps do when a resource's functionality is chunked into small permission sets?

Request only the necessary permissions Signup and view all the answers

What is the purpose of the scope query parameter in OAuth 2.0?

Specify the permissions needed Signup and view all the answers

What does the Microsoft identity platform follow for giving users and administrators control over data access?

OAuth 2.0 authorization protocol Signup and view all the answers

What is the term often used interchangeably with 'scopes' in OAuth 2.0?

Permissions Signup and view all the answers

What is the purpose of the resource identifier in the Microsoft identity platform?

Identify web-hosted resources Signup and view all the answers

What do third-party apps gain by integrating with the Microsoft identity platform?

Ability to request specific permissions Signup and view all the answers

What is the purpose of the scope parameter in an OpenID Connect or OAuth 2.0 authorization request?

To specify the delegated permissions that the app is requesting Signup and view all the answers

What is the difference between static user consent and incremental or dynamic user consent?

Static user consent requires all permissions to be predefined, while incremental consent allows requesting permissions over time Signup and view all the answers

When is admin consent required for an app?

When the app needs access to certain high-privilege permissions Signup and view all the answers

What is the purpose of the resource-based permissions in the Microsoft identity platform?

To indicate each permission value to the resource's identifier or application ID URI Signup and view all the answers

What is the difference between delegated permissions and app-only access in the Microsoft identity platform?

Delegated permissions are for accessing resources on behalf of a user, while app-only access is for accessing resources without a user context Signup and view all the answers

What does the Microsoft identity platform use to prompt the user to grant requested permissions if consent has not been given before?

User consent endpoint Signup and view all the answers

What does the app need to do if it wants to request more permissions over time as the customer uses more app features?

Specify the new scopes in the scope parameter when requesting an access token Signup and view all the answers

What is the purpose of the admin consent in the Microsoft identity platform?

To ensure that administrators have control before authorizing apps or users to access highly privileged data Signup and view all the answers

What is the significance of the application ID URI in the Microsoft identity platform?

It is used to uniquely identify the application Signup and view all the answers

In an OpenID Connect or OAuth 2.0 authorization request, what does the app use the scope query parameter for?

To request the permissions it needs Signup and view all the answers

What is the impact of Conditional Access on an app in most common cases?

It doesn't change the app's behavior or require any changes from the developer Signup and view all the answers

Under what circumstances does an app require code changes to handle Conditional Access challenges?

When an app indirectly or silently requests a token for a service Signup and view all the answers

What can enterprise customers do with Conditional Access policies?

Apply and remove Conditional Access policies at any time Signup and view all the answers

In what scenarios does an app require code changes to handle Conditional Access challenges?

Some scenarios using Conditional Access to do multifactor authentication Signup and view all the answers

In which scenario does an app require code to handle Conditional Access challenges?

Apps performing the on-behalf-of flow Signup and view all the answers

What is a method of protecting services using Conditional Access?

Allowing only Intune enrolled devices to access specific services Signup and view all the answers

When does an app need to handle Conditional Access challenges?

Web apps calling a resource Signup and view all the answers

What is a method of protecting services using Conditional Access?

Restricting user locations and IP ranges Signup and view all the answers

What are the scenarios that require code to handle Conditional Access challenges?

Apps using MSAL.js Signup and view all the answers

06: Implement user authentication and authorization

Questions and Answers

What does the Microsoft identity platform enable users and customers to sign in with?

When an application is registered with Microsoft Entra ID, what is automatically created in the home tenant?

What is the purpose of the application object in Microsoft Entra tenant?

What is the globally unique ID for an app registered in the Azure portal known as?

Where does the application object reside in the Microsoft Entra tenant?

What can be added in the Azure portal to make an app work and customize its branding?

What is the purpose of a service principal object in Microsoft Entra tenant?

What is the application object similar to in object-oriented programming?

Where is an application's 'home' tenant located?

What is used to delegate Identity and Access Management functions to Microsoft Entra ID?

What is created in every tenant where the application is used?

What does the application object describe?

What does the service principal object represent?

What is the relationship between the application object and service principals?

How many service principals does a single-tenant application have?

What must be created in each tenant where the application is used?

What does the security principal define?

What does the Microsoft Graph Application entity define the schema for?

What enables core features such as authentication and authorization during resource access?

What serves as the template for creating corresponding service principal objects?

What does a multi-tenant application have in each tenant where a user has consented to its use?

What does a legacy service principal represent?

What can a service principal representing a managed identity do?

Where is a service principal representing a managed identity created?

What defines what an app can actually do in a specific tenant?

What is the method through which a third-party app can access web-hosted resources on behalf of a user in the Microsoft identity platform?

What is the representation of a permission in the Microsoft identity platform?

What are the sets of permission in OAuth 2.0 often referred to as?

What is the identifier for a web-hosted resource that integrates with the Microsoft identity platform?

What can third-party apps do when a resource's functionality is chunked into small permission sets?

What is the purpose of the scope query parameter in OAuth 2.0?

What does the Microsoft identity platform follow for giving users and administrators control over data access?

What is the term often used interchangeably with 'scopes' in OAuth 2.0?

What is the purpose of the resource identifier in the Microsoft identity platform?

What do third-party apps gain by integrating with the Microsoft identity platform?

What is the purpose of the scope parameter in an OpenID Connect or OAuth 2.0 authorization request?

What is the difference between static user consent and incremental or dynamic user consent?

When is admin consent required for an app?

What is the purpose of the resource-based permissions in the Microsoft identity platform?

What is the difference between delegated permissions and app-only access in the Microsoft identity platform?

What does the Microsoft identity platform use to prompt the user to grant requested permissions if consent has not been given before?

What does the app need to do if it wants to request more permissions over time as the customer uses more app features?

What is the purpose of the admin consent in the Microsoft identity platform?

What is the significance of the application ID URI in the Microsoft identity platform?

In an OpenID Connect or OAuth 2.0 authorization request, what does the app use the scope query parameter for?

What is the impact of Conditional Access on an app in most common cases?

Under what circumstances does an app require code changes to handle Conditional Access challenges?

What can enterprise customers do with Conditional Access policies?

In what scenarios does an app require code changes to handle Conditional Access challenges?

In which scenario does an app require code to handle Conditional Access challenges?

What is a method of protecting services using Conditional Access?

When does an app need to handle Conditional Access challenges?

What is a method of protecting services using Conditional Access?

What are the scenarios that require code to handle Conditional Access challenges?

More Quizzes Like This

Mastering Azure AD Conditional Access

Conditional Access and MFA Quiz

Mastering Multifactor Authentication (MFA)

Azure AD Join and Device Management in Windows 10 Quiz