Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company is deploying an on-premises application named App1. Users will access App1 by using a URL of https://app1.contoso.com.
You register App1 in Azure Active Directory (Azure AD) and publish App1 by using the Azure AD Application Proxy.
You need to ensure that App1 appears in the My Apps portal for all the users.
Solution: You modify User and Groups for App1.
Does this meet the goal?
Click on the arrows to vote for the correct answer
A. B.A
Assigning users and groups to individual applications in Azure AD controls the visibility of the link.
If you want only a subset of your users to see the link in the Azure AD My Apps portal, configure user assignment as follows:
1. In the menu on the left, select Properties.
2. Set User assignment required to Yes.
3. Click Save.
4. In the menu on the left, click Manage > Users and groups.
5. Click Add user.
6. Select Users.
7. Select the users or groups that you want to provision. If you select a group, all members of the group are provisioned.
8. Click Select.
9. Click Assign.
10.It might take several minutes for a link to show up in the My Apps portal.
https://cloud.google.com/architecture/identity/integrating-google-services-and-apps-with-azure-ad-portal#adding_linksThe proposed solution of modifying User and Groups for App1 is not sufficient to meet the goal of ensuring that App1 appears in the My Apps portal for all users.
Azure AD Application Proxy enables secure remote access to on-premises web applications. By publishing App1 through Azure AD Application Proxy, users can access App1 through a URL of https://app1.contoso.com, and the authentication and authorization is handled by Azure AD.
To ensure that App1 appears in the My Apps portal for all users, you need to create an enterprise application in Azure AD for App1 and configure the provisioning settings to allow for automatic user assignment. This will ensure that all users who have been granted access to the application are able to see it in their My Apps portal.
Therefore, the correct solution is to create an enterprise application for App1 in Azure AD and configure the provisioning settings to allow for automatic user assignment. This will ensure that App1 appears in the My Apps portal for all users.
So the answer is B. No, modifying User and Groups for App1 does not meet the goal.