A seasonal ticket-kiosk enterprise application must stop accepting sign-ins this week, but the security engineer must keep the service principal and its grants for a later audit. What action meets both needs?
Select an answer to reveal the explanation.
Short Explanation
You want the kiosk dark for the season but the paperwork still in the drawer. Disable user sign-in on the enterprise app—doors locked, object and grants still there for the auditors.
Full Explanation
Disabling user sign-in on an enterprise application prevents interactive sign-ins while retaining the service principal and existing permission grants for review. Deleting the enterprise application removes that audit trail and complicates later investigation. Revoking grants alone does not necessarily stop all sign-in paths if the app remains enabled. Application Proxy is unrelated to gating a cloud SaaS enterprise app’s sign-in flag.