Your company, named Contoso, Ltd., implements several Azure logic apps that have HTTP triggers. The logic apps provide access to an on-premises web service. Con...
Microsoft AZ-305 Exam
Questions Number: 17 out of 268 Questions
6.34%
Question 17
Your company, named Contoso, Ltd., implements several Azure logic apps that have HTTP triggers. The logic apps provide access to an on-premises web service. Contoso establishes a partnership with another company named Fabrikam, Inc. Fabrikam does not have an existing Azure Active Directory (Azure AD) tenant and uses third-party OAuth 2.0 identity management to authenticate its users. Developers at Fabrikam plan to use a subset of the logic apps to build applications that will integrate with the on-premises web service of Contoso. You need to design a solution to provide the Fabrikam developers with access to the logic apps. The solution must meet the following requirements: - Requests to the logic apps from the developers must be limited to lower rates than the requests from the users at Contoso. - The developers must be able to rely on their existing OAuth 2.0 provider to gain access to the logic apps. - The solution must NOT require changes to the logic apps. - The solution must NOT use Azure AD guest accounts. What should you include in the solution?
Many APIs support OAuth 2.0 to secure the API and ensure that only valid users have access, and they can only access resources to which they're entitled. To use Azure API Management's interactive developer console with such APIs, the service allows you to configure your service instance to work with your OAuth 2.0 enabled API. Incorrect: Azure AD business-to-business (B2B) uses guest accounts. Azure AD Application Proxy is for on-premises scenarios. Reference: https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-oauth2
