Design Identity, Governance & Monitoring

Your organization needs a cloud-based identity and access management service to authenticate users and control access to Azure resources and SaaS apps. Which service should you design around?

What is the fundamental difference between Microsoft Entra ID and on-premises Active Directory Domain Services (AD DS) that affects your design?

A design requires per-app SSO, security reports, and conditional access for thousands of SaaS apps. Which Entra ID edition tier is the minimum you should recommend?

Which Microsoft Entra ID edition is required to use Privileged Identity Management (PIM) and Identity Protection risk-based policies?

You must design tenant-wide identity for an Azure deployment. What is an Entra ID 'tenant' in your architecture?