Question 46

Explanation

<<This is a NOT question>>

The above scenario is an example of a federation that enables the access of services across organizational/domain boundaries by establishing trust relationships between the identity providers of Spotify & Google.

Here is a step-by-step process of how this works:

1. Spotify uses Microsoft Entra ID authentication

2. The user authenticates with Google

3. Spotify has a trust relationship with Google. That means Spotify trusts Google.

(So, the options There is a trust relationship between Spotify's Microsoft Entra ID & Google and Microsoft Entra ID used by Spotify trusts Google are incorrect).

4. Spotify trusts the user and allows access.

Thanks to icons8.com for the icons in the above image.

Corroborate the image with the above four bullet points.

In the above example, Spotify's Microsoft Entra ID trusts Google. But the opposite isn't true. That is, Google doesn't trust Spotify unless that trust relationship is configured. So, the option Google trusts Spotify's Microsoft Entra ID is the correct answer.

The user accesses Spotify with his Google account. Thanks to the trust relationship, he doesn't need a separate username and password to log into Spotify. The option The user does not need a separate username and password to log into Spotify is incorrect too.

Reference Link: https://learn.microsoft.com/en-us/training/modules/describe-identity-principles-concepts/6-describe-concept-federation