An administrator is preparing a staged rollout to migrate federated users to pass-through authentication. Before any user can be added to a staged rollout group, Microsoft Entra Connect must be configured to support the chosen cloud sign-in method. Which prerequisite must the administrator complete first for pass-through authentication staged rollout?
- AConfigure password writeback in Microsoft Entra Connect, because staged rollout for pass-through authentication requires writeback to be enabled before any group can be added to the rollout.
- BInstall and enable a pass-through authentication agent through Microsoft Entra Connect, because staged rollout for pass-through authentication needs at least one healthy agent before users can be enrolled. Correct
- CConvert the contoso.com domain from federated to managed in Microsoft Entra Connect, because staged rollout cannot enrol users while the domain is still federated.
- DEnable Microsoft Entra Connect Health for synchronisation, because staged rollout for pass-through authentication will not start until Connect Health is monitoring the sync engine.
Why A is wrong: Password writeback supports self-service password reset back to on-premises Active Directory and is not a prerequisite for enabling pass-through authentication staged rollout.
Why B is correct: Pass-through authentication staged rollout validates sign-ins through agents, so at least one healthy agent must be installed and enabled in Microsoft Entra Connect before any user can be added to the rollout.
Why C is wrong: Converting the domain to managed is the final cutover step, not a prerequisite, and staged rollout is specifically designed to run while the domain remains federated.
Why D is wrong: Connect Health provides monitoring and is recommended but is not a hard prerequisite that blocks the enabling of pass-through authentication staged rollout.