SC-300 - Implement and Manage User Identities (25% of the exam) - Section 1.3

Implement and manage identities for external users using Microsoft Entra B2B collaboration and cross-tenant access.

Configure External collaboration settings, guest invitation permissions, and external user account management in Microsoft Entra B2B collaboration. Apply cross-tenant access settings to control inbound and outbound trust for guest and partner scenarios.

External collaboration settingsguest invitationsexternal user account managementcross-tenant access settingsB2B collaboration

Practice question for this objective

Free sampleImplement and Manage User Identitiesmedium

Two partner organisations on separate Microsoft Entra tenants want their members to collaborate in Microsoft Teams shared channels using their home accounts, and a strict requirement states that no guest user objects may be created in either tenant. You must enable this collaboration model in your cross-tenant access settings while leaving ordinary B2B guest invitations unaffected. Which capability should you enable for the partner organisation?

  • AB2B direct connect inbound settings, which establish a mutual trust that lets partner users access Teams shared channels with no guest object created. Correct
  • BB2B collaboration inbound settings, which let the partner's users be added to your tenant as guest objects you can target with Conditional Access.
  • CSelf-service sign-up for the application, so partner members create their own accounts when they first open the shared resource.
  • DCross-tenant synchronisation, which provisions the partner's users into your tenant automatically and keeps them in step as joiners and leavers occur.
Distinguish B2B direct connect from B2B collaboration: only direct connect enables Teams shared channel access without creating guest user objects. B2B direct connect establishes a two-way trust between tenants for Teams Connect shared channels. Users access resources with their home accounts and no guest object is provisioned in either directory, which B2B collaboration and cross-tenant synchronisation cannot do because both create user objects.

Why A is correct: B2B direct connect is the only model that grants Teams shared channel access through a tenant-to-tenant trust without creating any guest user object.

Why B is wrong: B2B collaboration is the standard guest model, but it creates guest user objects, which the requirement explicitly forbids.

Why C is wrong: Self-service sign-up produces local accounts in your tenant for an external app and does not enable Teams shared channel access without guest objects.

Why D is wrong: Cross-tenant synchronisation also creates B2B user objects in the target tenant, so it still produces accounts the requirement prohibits.

See more SC-300 practice questions, answers explained.

Exam traps in Implement and Manage User Identities

Answers that look right on this material and are not. Each one is a distractor from a different question in the SC-300 bank for this domain.

  • Trust multi-factor authentication from the partner's Microsoft Entra tenant, so your policies accept their completed MFA claim.

    Why it is wrong: Trusting MFA accepts the partner's completed multi-factor claim, a nearby trust toggle, but it does not pass device compliance state into your policies.

  • Set the inbound external collaboration default to block all external organisations, then leave the two partner tenants on the default inherited settings.

    Why it is wrong: Blocking the inbound default is half right, but partners left on inherited settings would also be blocked, so they would not remain allowed.

  • Configure Microsoft Entra B2B direct connect so partner users access the shared Teams shared channels without any guest object being created in your tenant.

    Why it is wrong: B2B direct connect is tempting because it also covers Teams collaboration, but it deliberately creates no guest object, so you cannot manage the partner users as guests in your directory.

Examworthy is not affiliated with or endorsed by Microsoft. Original, blueprint-aligned practice material only.