2.3.1. Enterprise Application Management

💡 First Principle: Enterprise applications represent external applications (SaaS apps, custom apps) that users in your tenant can sign into. Managing them controls what applications your users can access and what data those applications can read.

Scenario: Your organization uses Salesforce and custom internal applications. You need to enable single sign-on (SSO) while controlling what user data these applications can access.

Key Management Tasks

• Configure SSO: Enable seamless authentication
• Assign users and groups: Control who can access the application
• Configure provisioning: Automatically create/update user accounts in the application
• Review permissions: Audit what data the application can access

Key Roles for Application Management

⚠️ Exam Trap: Assigning Application Administrator when Cloud Application Administrator suffices. If Admin1 only needs to assign users to applications (not manage app registrations), Cloud Application Administrator follows least privilege.