A brine-shrimp tank portal must accept only accounts from the hatchery’s Microsoft Entra tenant, not any Entra user on the internet. What should the developer configure?
Select an answer to reveal the explanation.
Short Explanation
If only the hatchery’s people belong inside, lock the app registration to that one tenant and check the issuer. Multi-tenant is for when any org can walk in.
Full Explanation
Supported account types on the app registration determine whether tokens from only one tenant, any org directory, or personal Microsoft accounts are accepted. Single-tenant apps should also validate that the token issuer matches the expected Entra endpoint for that tenant. Multi-tenant settings would incorrectly broaden who can sign in.