Enable Single Sign-On for Company Users
Question
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an on-premises Active Directory Domain Services (AD DS) domain and an established Azure Active Directory (Azure AD) environment.
Your company would like users to be automatically signed in to cloud apps when they are on their corporate desktops that are connected to the corporate network.
You need to enable single sign-on (SSO) for company users.
Solution: Install and configure an Azure AD Connect server to use pass-through authentication and select the Enable single sign-on option.
Does the solution meet the goal?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B.A
The proposed solution meets the goal of enabling single sign-on (SSO) for company users when they are on their corporate desktops that are connected to the corporate network.
Here's how the solution works:
Azure AD Connect server: Azure AD Connect is a tool that synchronizes user accounts and passwords between your on-premises Active Directory Domain Services (AD DS) and Azure AD. It allows you to configure several synchronization options, including password hash synchronization and pass-through authentication.
Pass-through authentication: With pass-through authentication, user credentials are validated against the on-premises AD DS. If the credentials are valid, the user is signed in to the cloud app without requiring them to enter their username and password again.
Enable Single Sign-On (SSO) option: This option enables SSO for cloud apps that support it. When a user signs in to their corporate desktop while connected to the corporate network, they are automatically signed in to cloud apps without requiring them to enter their credentials again.
Therefore, by installing and configuring an Azure AD Connect server to use pass-through authentication and selecting the Enable Single Sign-On option, the proposed solution meets the goal of enabling SSO for company users when they are on their corporate desktops that are connected to the corporate network.
