A) Configure Dynamic Privilege Access settings in Prisma Access and associate the user groups with the corresponding project IP address pools. and D) In the Cloud Identity Engine, add the Microsoft Entra ID directory as an IdP and configure the required user group mappings for each project.

B) Create a custom application in Microsoft Entra ID representing each project and configure SSO with the Cloud Identity Engine.

C) Implement an authentication sequence in Prisma Access that prioritizes Cloud Identity Engine authentication for users belonging to project-specific groups.