Continue your lesson
Trace the identity, credential, token, assignment, policy decision, resource, and audit record for each access request.
Block 1 of 6Compare B2B collaboration · Cross-tenant access settings
Current · 15 min
Compare B2B collaboration · Cross-tenant access settings
Optional concept notes
B2B collaboration
Represents an external person as a guest who can access tenant resources after invitation or redemption.
Cross-tenant access settings
Control inbound and outbound collaboration trust and access with other Microsoft Entra organizations.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 2 of 6Compare B2B direct connect · External collaboration settings
15 min
Compare B2B direct connect · External collaboration settings
Optional concept notes
B2B direct connect
Establishes mutual cross-tenant trust for supported collaboration without a traditional guest object workflow.
External collaboration settings
Limit guest invitation permissions and allowed or blocked collaboration domains.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 3 of 6Understand External identity provider
18 min
Understand External identity provider
Optional concept notes
External identity provider
Configures supported SAML or WS-Federation trust for external-user authentication.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 4 of 6Understand Guest access review
10 min
Understand Guest access review
Optional concept notes
Guest access review
Asks designated reviewers to confirm that external users still need assigned access.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 5 of 6Understand Connected organization
10 min
Understand Connected organization
Optional concept notes
Connected organization
Represents an external directory or domain that participates in entitlement-management access.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 6 of 6Understand Cross-tenant synchronization
12 min
Understand Cross-tenant synchronization
Optional concept notes
Cross-tenant synchronization
Automates creation update and removal of B2B users across configured tenants.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Practice the reasoning here
Use a fictional tenant. Draw one access path, apply least privilege, test an exception, and name the logs that would confirm the result.
- State the expected result before changing or testing anything.
- Name the observation, command, log, or report that would confirm it.
- Explain why the closest alternative does not fit the same requirement.
Check the whole objective
This unlocks objective 1.3 for recall. The latest checkpoint needs 70% or higher; a lower result puts the lesson back near the front of your timeline.