You are designing an authentication solution for SAP Business Technology Platform (BTP) software as a service (SaaS) applications.The solution will use trust configurations towards SAP Cloud Identity Services - Identity Authentication Service (IAS) and Microsoft Entra ID.You plan to use Microsoft Entra ID to manage all identities.Which protocol should you recommend to communicate between SAP BTP and Microsoft Entra ID?
Answer(s): C
Microsoft Entra single sign-on (SSO) integration with SAP Cloud Identity Services SAP Cloud Identity Services application expects the SAML assertions in a specific format, which requires you to add custom attribute mappings to your SAML token attributes configuration. T Configure Microsoft Entra SSOFollow these steps to enable Microsoft Entra SSO.1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.2. Browse to Identity > Applications > Enterprise applications > SAP Cloud Identity Services > Single sign-on.3. On the Select a single sign-on method page, select SAML.4. On the Set up single sign-on with SAML page, click the pencil icon for Basic SAML Configuration to edit the settings.5. Etc.
DRAG DROP (Drag and Drop is not supported)You have a Microsoft Entra tenant named contoso.com.You plan to use SAP Cloud Identity Services.You need to integrate single sign-on (SSO) and SAP Cloud Identity Services.Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Answer(s): A
Step 1: From the Microsoft Entra admin center, create and configure an enterprise application Currently, SAP Cloud Identity Services acts as a Proxy Identity Provider to SAP applications. Microsoft Entra ID in turn acts as the leading Identity Provider in this setup.The following diagram illustrates this relationship:With this setup, your SAP Cloud Identity Services tenant is configured as a trusted application in Microsoft Entra ID.Adding SAP Cloud Identity Services from the galleryTo configure the integration of SAP Cloud Identity Services into Microsoft Entra ID, you need to add SAP Cloud Identity Services from the gallery to your list of managed SaaS apps.1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.2. Browse to Identity > Applications > Enterprise applications > New application.3. In the Add from the gallery section, type SAP Cloud Identity Services in the search box.4. Select SAP Cloud Identity Services from results panel and then add the app. Wait a few seconds while the app is added to your tenant.Step 2: From SAP Cloud Identity Services, create a new corporate identity provider and upload the metadata XML file.Step 3: From the Microsoft Entra admin center, download the metadata XML file.Step 4: From the Microsoft Entra admin center, configure custom security attributes for the enterprise application.SAP Cloud Identity Services application expects the SAML assertions in a specific format, which requires you to add custom attribute mappings to your SAML token attributes configuration. The following screenshot shows the list of default attributes.In addition to above, SAP Cloud Identity Services application expects few more attributes to be passed back in SAML response, which are shown below. These attributes are also pre populated but you can review them as per your requirements.Incorrect:* From SAP Cloud Identity Services, download the Identity Authentication Service (IAS) metadata file and upload the file to enterprise application.
You have a Microsoft Entra tenant named contoso.com.You are designing an authentication and authorization solution for SAP Business Technology Platform (BTP) software as a service (SaaS) applications.SAP BTP subaccounts trust the SAP Cloud Identity Services - Identity Authentication Service (IAS) tenant of your company.You plan to establish a trust between the IAS tenant and contoso.com.You need to ensure that authorization decisions in the SAP BTP applications are based exclusively on claims issued by contoso.com.What should you do?
Using Microsoft Entra ID to secure access to SAP platforms and applications Use Federated Authentication in SAP Business Technology Platform and SAP SaaS applications through SAP Identity Authentication ServiceWhen using federation, you can choose to define the trust configuration at the BTP Subaccount level. In that case, you must repeat the configuration for each other Subaccount you're using. By using IAS as an intermediate trust configuration, you benefit from centralized configuration across multiple Subaccounts and you can use IAS features such as risk-based authentication and centralized enrichment of assertion attributes. * To safeguard the user experience, these advanced security features should only be enforced at a single location. This could either be IAS or when keeping Microsoft Entra ID as the single authoritative user store (as is the premise of this paper), this would centrally be handled by Microsoft Entra Conditional Access Management. *
You have an Azure subscription.You plan to use an automated method to deploy single instances of SAP S/4HANA. The solution must minimize complexity and administrative effort.What should you use?
You can deploy S/4HANA infrastructure with Azure Center for SAP solutions.Deployment typesThere are three deployment options that you can select for your infrastructure, depending on your use case.* Distributed with High Availability (HA) creates distributed HA architecture.* Distributed creates distributed non-HA architecture.*-> Single Server creates architecture with a single server. This option is available for non-production environments only.
You have an SAP production landscape in Azure. The landscape is hosted on 50 virtual machines that run SUSE Enterprise Linux (SLES). The virtual machines are billed by using pay-as-you-go rates.You need to minimize operating system costs for the virtual machines.What should you use?
Answer(s): B
Incorrect:* Azure Hybrid BenefitAzure Hybrid Benefit is a licensing offer that helps you migrate and save to Azure. To apply this benefit, you must be paying for either:* Windows Server or SQL Server core licenses with Software Assurance or a subscription to these products.*-> An active Linux subscription, including Red Hat Enterprise Linux or SUSE Linux Enterprise Server running in Azure.By using Azure Hybrid Benefit, you can achieve cost savings, modernize and maintain a flexible hybrid environment while optimizing business applications. Explore savings with the Azure Hybrid Benefit Savings Calculator.Enterprise and other direct customers can now simplify their SQL Server license management experience and optimize Azure SQL costs across entire Azure subscriptions or their overall billing account by using centrally managed Azure Hybrid Benefit for SQL Server.
Post your Comments and Discuss Microsoft AZ-120 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-120 content, but please register or login to continue.