App1 is a single-tenant Azure AD application used by contoso.com. You need to enable fabrikam.com users to access App1 while governing and managing external user access lifecycle. Which solution should you propose?

Azure AD entitlement management is the correct solution because it allows you to manage the identity and access lifecycle for external users (fabrikam.com) who need access to resources in your organization (contoso.com). It enables self-service access requests, approval workflows, and automated access reviews, which are crucial for governing and managing external user access. Azure AD pass-through authentication is an authentication method for internal users and doesn't address external user access governance. Conditional Access policies enforce access conditions but don't manage the lifecycle of external user access. Azure AD Privileged Identity Management (PIM) is for managing privileged roles and access within your organization, not for governing external user access to applications.