Free Microsoft Identity SC-300 Actual Exam Questions - Question 10 Discussion
Directory (Azure AD) tenant-
Users sign in to computers that run Windows 10 and are joined to the domain.
You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).
You need to configure the computers for Azure AD Seamless SSO.
What should you do?
D, since the browsers need that zone setting to auto-send Kerberos tickets without user prompts.
It’s D because without trusting the Azure AD URLs in the intranet zone, the browsers won’t send the Kerberos tickets automatically, which breaks the seamless experience. The other options don’t directly affect this behavior.
Maybe D. The Intranet Zone tweak makes sense since it allows browsers to pass credentials automatically, which is key for seamless SSO to work smoothly without extra prompts.
C imo, the Azure AD Connect Authentication Agent is what actually enables the seamless SSO feature by handling the Kerberos ticketing. D is more about client browser trust but doesn’t activate SSO itself.
Not A, Enterprise State Roaming isn’t related to SSO setup. D sounds right since the browser needs to trust Azure AD URLs for seamless token passing without prompts. That intranet zone tweak is crucial here.
C/D? Installing the Azure AD Connect Authentication Agent makes sense since it supports the seamless SSO feature, but adjusting Intranet Zone settings is also important for browser-based sign-in to work smoothly.
D imo, it seems like modifying the Intranet Zone settings is key here. Azure AD Seamless SSO relies on the browser being able to automatically sign users in without prompting, which usually means the Azure AD URLs have to be recognized as part of the intranet zone for Windows to send the credentials automatically. The other options don’t seem directly related to configuring seamless SSO on domain-joined computers.