Question

A multinational manufacturer must let engineers from three partner firms access a specific set of Azure-hosted design applications. Requirements: partners authenticate with their own organizational credentials (no new passwords), access must be time-boxed and auto-expire after each project phase, partner users must periodically re-attest their continued need for access, and the security team wants a single package that bundles the app roles and group memberships partners receive. Which combination of Entra ID capabilities best satisfies these requirements?

Accepted Answer

Entra External ID B2B collaboration with entitlement management access packages that include access reviews and expiration policies

Answer

Create member (non-guest) accounts for each partner user in the manufacturer's tenant and enforce Conditional Access with sign-in frequency controls

Answer

Entra ID B2B direct connect (shared channels) combined with Privileged Identity Management role activation for the design apps

Answer

Federate each partner tenant using a cross-tenant sync configuration and assign licenses through dynamic security groups