Microsoft Azure Architect Design (AZ-304) Practice Test

In Azure, which identity service provides federated identity management with Active Directory Federation Services (AD FS)?

1. Azure AD B2C

2. Azure AD DS

3. Azure Active Directory

4. Azure AD Connect

The correct answer is: Azure Active Directory

The correct choice for the identity service that provides federated identity management with Active Directory Federation Services (AD FS) is Azure Active Directory. This service allows organizations to manage user identities and access to resources across their cloud and on-premises environments. Azure Active Directory supports federation, which enables organizations to authenticate users from multiple identity providers while maintaining a single, unified identity across applications. AD FS can be integrated with Azure Active Directory to facilitate single sign-on (SSO) experiences, allowing users to authenticate themselves with their on-premises AD credentials. This integration is essential for organizations that want to leverage their existing investments in Microsoft Active Directory while providing access to Azure resources, thus creating a seamless user experience across various applications and services. Other choices, while related to identity services, do not provide the same federated identity management capabilities. For instance, Azure AD B2C is designed for consumer-facing applications and does not directly involve AD FS. Azure AD DS provides managed domain services, which is different from federated identity management. Azure AD Connect serves as a tool to synchronize on-premises directories with Azure AD rather than providing the federated identity functionality itself.