問題文
An organization is planning the identity strategy for a customer-facing agent on its public website. Customers do not have accounts in the company's Microsoft Entra ID tenant, but the agent must call an order API on behalf of the person chatting. Which identity approach fits?
選択肢
- Select no authentication and store one service account's credentials in the connection, because asking a public visitor to sign in would lose most of the traffic.
- Configure manual authentication with a generic OAuth 2 provider that the customers already use, so the agent can obtain a token for the API.
- Ask the customer to type their order number and email address, then trust those values as the identity.
- Use the Authenticate with Microsoft option, because it configures Entra ID automatically for any user on any channel.