3,584 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags

Sort by: Updated
1 answer

Entra External ID – OTP Validity & Customization

I’ve configured an Entra External ID tenant with user flows for sign-up and password reset. During both processes, users receive a one-time passcode (OTP) by email. What is the default validity period of the OTP? Can the OTP length and the validity be…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-12-06T04:32:23.3533333+00:00
Saravana Kumar Palanisamy 20 Reputation points
answered 2025-12-06T04:32:32.4+00:00
Q&A Assist
1 answer

I get "Unable to Update...", when I attempt to require invitation only to specified domains.

I'm trying to only "Allow invitations only to the specified domains (most restrictive)" I have added a single domain, but I get an error "unable to update external collaboration settings. Please try again later".

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-12-06T01:31:02.9866667+00:00
Billy Thomas 0 Reputation points
answered 2025-12-06T01:31:11.29+00:00
Q&A Assist
1 answer

Issue: Cross-Tenant OBO with CIAM - Resource Resolved in Wrong Tenant

Issue: Cross-Tenant OBO with CIAM - Resource Resolved in Wrong Tenant Problem: When requesting an access token for a custom API in an internal Azure AD tenant from a CIAM (external) tenant using On-Behalf-Of (OBO), Azure AD resolves the resource in the…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-12-02T04:02:52.8366667+00:00
Parth Jagani 0 Reputation points
commented 2025-12-05T17:31:02.93+00:00
Shubham Sharma 3,430 Reputation points Microsoft External Staff Moderator
4 answers

Refresh tokens expire after 12 hours using Microsoft Entra External ID native authentication with OTP

Issue We chose Microsoft Entra External ID for authenticating external consumers using CIAM after reading this article We're using these Android & iOS clients to signup and signin users with OTP authentication …

Azure | Azure Startups
Azure | Azure Startups
Startups: Companies that are in their initial stages of business and typically developing a business model and seeking financing.
1,024 questions
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2024-09-26T20:59:10.17+00:00
Niek Bijman 85 Reputation points
commented 2025-12-05T14:48:38.2033333+00:00
Dan Rios 2,040 Reputation points MVP
2 answers

Cannot login to Azure Portal - Personal Account

I am the only administrator in my Azure AD tenant. It is my personal Account. MFA is enforced on the tenant and my authentication method is not available anymore. I cannot complete sign-in to the Azure Portal. I do not get any other option than MFA -…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-12-04T08:14:15.62+00:00
Junfeng Dai 0 Reputation points
answered 2025-12-05T03:24:46.3833333+00:00
Sridevi Machavarapu 7,610 Reputation points Microsoft External Staff Moderator
2 answers

Google Identity Provider Authorization Issue at Microsoft Entra External Id

Hi Team, We are using Microsoft Entra external Id for our application login, here we are configured the build-in google IDP and invite google users into external Id and allows sign in with google! When Initially user sign in via user-flow with google…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-11-20T06:12:11.01+00:00
Thangamani Balasubramanian 5 Reputation points
answered 2025-12-04T14:02:45.4966667+00:00
David Dierckens 0 Reputation points
0 answers

Can I disable concurrent logins for users in Azure B2C application?

Hi all, We have an introduced compliance requirement whereby users are only allowed to have a single session logged in at any one point in time (across browsers, devices etc). Does AD B2C allow for this?

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-07-30T11:33:15.83+00:00
Adam Friedland 0 Reputation points
commented 2025-12-04T11:55:37.9166667+00:00
Carolyne-3676 876 Reputation points
1 answer One of the answers was accepted by the question author.

Entra external tenant - federation with other Entra ID tenants

I am exploring entra-id external tenant and comparing with workforce tenant. WF tenant have builtin federation with other Azure Entra ID tenants. No extra configuration needed. This is not supported in Entra ID. So I was hoping I can do a manual OIDC…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-08-02T19:01:34.04+00:00
Martin Kallukalam 540 Reputation points
edited a comment 2025-12-03T21:14:55.5866667+00:00
Jingwei Ke 0 Reputation points
1 answer

Cannot create Microsoft Entra External ID (B2C) tenant using Azure for Students subscription

Hello, I am using an Azure for Students subscription for my learning. I am trying to create a Microsoft Entra External ID (Azure AD B2C) tenant, but I am getting a region restriction error saying that the resource cannot be created in the allowed regions…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-11-29T03:56:54.5033333+00:00
Aditya Gupta 0 Reputation points
commented 2025-12-03T13:23:29.67+00:00
VEMULA SRISAI 3,090 Reputation points Microsoft External Staff Moderator
1 answer

Unable to delete External Configuration Tenant applyarc.onmicrosoft.com due to UserCountExceeded error

Hi there, I'm trying to delete an External Configuration Tenant (Microsoft Entra External ID) called applyarc.onmicrosoft.com within my resource group rg - applyarc - prod. When I select the tenant and attempt to delete it through the Azure portal, the…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-10-30T20:49:19.1833333+00:00
A.G 0 Reputation points
answered 2025-12-03T11:49:36.2166667+00:00
Lubomir Juriga 6 Reputation points
0 answers

External ID login page not showing identity providers button to singin

Hi Everyone, We are currently working with an ABC organization, under which I have set up an External B2C tenant for customer logins. For this, I registered an app in the main tenant and configured a custom Identity Provider (OIDC) in the External B2C…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-06-27T11:52:28.97+00:00
Rajkumar Reddy Avula 40 Reputation points
commented 2025-12-03T03:53:45.54+00:00
Tuong Bui 0 Reputation points
3 answers

Intermittent but regular certificate errors on calls to login.microsoftonline.com

Our SAAS application allows users to authenticate via OIDC. In the last week, we have started to see calls to the well-known endpoint failing with the error: com.microsoft.aad.msal4j.MsalClientException: javax.net.ssl.SSLHandshakeException: PKIX path…

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-02-12T11:36:14.7933333+00:00
Alex 10 Reputation points
commented 2025-12-02T18:35:17.8066667+00:00
Siward 0 Reputation points
1 answer

Disable Email Self-Sign Up, but Allow Self-Sign Up on External IdPs

I only want users to be able to create accounts via an external identity provider in my Microsoft Entra External ID Tenant. I want to disallow the creation of accounts via the default email method. So far, I cannot do this. I cannot delete email sign up…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-12-01T17:41:25.8633333+00:00
Carl Schroedl 0 Reputation points
commented 2025-12-02T17:21:06.8766667+00:00
Rukmini 8,600 Reputation points Microsoft External Staff Moderator
2 answers

AADSTS500207: The account type can't be used for the resource you're trying to access.

External tenant (CIAM) users cannot acquire access tokens for an API exposed by an app in the internal tenant. The error is:AADSTS500207: The account type can't be used for the resource you're trying to access. ** What is the setup? **Cross-tenant…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-11-30T21:57:35.3933333+00:00
Parth Jagani 0 Reputation points
answered 2025-12-02T12:42:22.6233333+00:00
Shubham Sharma 3,430 Reputation points Microsoft External Staff Moderator
1 answer

Recover Global Admin Microsoft account with lost MFA account

I am currently unable to log in to azure portal due to issues with Multi-Factor Authentication (MFA). Here are the details: Issue: I am able to login to Microsoft but Login attempt for portal prompt for MFA prompt., but i never get the MFA number on my…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-11-30T05:32:16.09+00:00
Mohammed Taki 0 Reputation points
commented 2025-12-02T11:04:47.6433333+00:00
Raja Pothuraju 43,340 Reputation points Microsoft External Staff Moderator
2 answers One of the answers was accepted by the question author.

Error message: AADSTS5000225: This tenant has been blocked due to inactivity

I am unable to get my Azure account back. I checked every post made by people but somehow I not even able to login to Azure account. It is sending me: Error Code: 5000225 This tenant has been blocked due to inactivity. To learn more about tenant…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-11-16T14:59:44.9733333+00:00
Yashika Sorathia 20 Reputation points
accepted 2025-12-01T10:57:33.0633333+00:00
Yashika Sorathia 20 Reputation points
2 answers

Moving on premises AD to Azure

Planning to move on premises AD to Azure. What is best way to do this? We are moving application along with AD to Azure. We don't want maintain local AD. Please suggest what is best way

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-11-27T11:52:12.96+00:00
ANIL KUMAR DUSANAPUDI 0 Reputation points
answered 2025-11-29T00:59:11.63+00:00
SUNOJ KUMAR YELURU 17,321 Reputation points MVP Volunteer Moderator
1 answer

How do I add add a SAML/WS-Fed identity provider to user flow via microsoft graph in entra external ID?

I have an user flow for my SaaS app with entra external id as my IDP, and I need to have a feature in my app which my costumers can add their SAML/WS-Fed IDPs and log in with their identities. As far as I know, I can configure federation via microsoft…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-11-28T14:38:04.4166667+00:00
piltie 0 Reputation points
edited the question 2025-11-28T14:39:01.16+00:00
piltie 0 Reputation points
2 answers

ExternalAzureAD guests failing with AADSTS399266 when using ciamlogin.com authority

Hi all, I'm configuring a Microsoft Entra External tenant to act as a dedicated identity provider for authenticating and authorizing users into a Web API. The goal is to allow both local tenant users and external guest users from other Entra tenants to…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-11-28T01:15:23.7233333+00:00
Daniel Breves 0 Reputation points
answered 2025-11-28T07:56:25.6833333+00:00
Monalisha Jena 4,070 Reputation points Microsoft External Staff Moderator
3 answers

How can I upgrade my customer facing Entra External ID Tennant

I am unable to upgrade my customer facing Azure Entra External ID Tennant. I want to get Microsoft Entra External ID Premium P1 so I can set up MFA and conditional access but have wasted half a day trying to figure it all out and am very close to taking…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-11-21T21:01:46.0866667+00:00
Mike Dooney 0 Reputation points
edited a comment 2025-11-27T17:17:50.5+00:00
Shubham Sharma 3,430 Reputation points Microsoft External Staff Moderator