Question

Your organization wants to enable single sign-on for a third-party SaaS application that another company developed and published to the Microsoft Entra application gallery. As the Microsoft 365 administrator, which Microsoft Entra ID object should you configure to integrate this application with your tenant?

Accepted Answer

Add the application from the gallery as an Enterprise application (service principal) in your tenant

Answer

Create a new App registration to represent the third-party application in your tenant

Answer

Create a security group and assign the application publisher's tenant as a member

Answer

Configure a conditional access policy that references the application's client secret