Microsoft Security Microsoft Entra Microsoft Entra External ID

0 answers

B2B guest invitations blocked tenant-wide — "Invitations are blocked for this directory due to suspicious activity" — request review and removal of block

** Hello, I am the Global Administrator of the tenant below. All B2B guest invitations in our tenant are failing tenant-wide, and Microsoft Graph returns an explicit fraud-hold error asking us to contact support. I am requesting an investigation and…

asked

Kumar k 0

edited the question

Kumar k 0

0 answers

External ID (CIAM): local email+password sign-ins for some users no longer validated in our tenant; admin password resets ineffective

Since mid-July 2026, a growing subset of customers in our Entra External ID tenant, specifically local email+password accounts whose email domain is verified in another Entra tenant, can no longer sign in. Failed attempts produce no sign-in log entries…

asked

Darrell Draney 0

1 answer

Azure AD B2C Supported Countries for SMS

Hello, I had a question pertaining to Azure AD B2C regarding SMS that I couldn't find in the docs. What countries do Azure AD B2C support for SMS? Thank you.

asked

Kristy-1127 20

accepted

Kristy-1127 20

2 answers

EEID to Entra ID OIDC federation with private_key_jwt not client_secret

You can now federate EEID with Entra ID via OIDC not via guest: https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-entra-id-federation-customers I have this working with client_secret, but cannot get it to work with the private_key_jwt…

asked

RoryB 620

recommended

JuliaMarvin 20,735 Volunteer Moderator

1 answer

Entra External Id: Password Change Experience for Authenticated Customers

I am implementing Microsoft Entra External ID for Customers (CIAM) as the identity provider for our customer-facing web portal and mobile application. While reviewing the Microsoft documentation and building the solution, I found extensive documentation…

asked

Rojan Maharjan 0

edited an answer

RoryB 620

1 answer

"A transient error has occurred. Please try again." with code 90202

Hi! We're having reports of users being unable to finish their "forgot my password" user flow, hitting the error described in the title. We've checked everywhere on our end and can't figure out what could be causing this. Could you provide any…

asked

Raelson Farias de Araújo 0

edited an answer

Raelson Farias de Araújo 0

0 answers

Mandatory passkeys guidance

I have been told that my ID uses an external sign-in. A recent email I received said passkeys will be required. I need some guidance and assistance. I have had authentication issues in the past (unable to access resources) which makes me very nervous and…

asked

Jack Halpern 20

0 answers

Users from internal domain rpsconsulting.in are able to access the application, but external users are unable to access, we have also configure B2B collabration

We have configured B2B integration and users from internal domain rpsconsulting.in are able to access the application, but external users are unable to access.

asked

Ali Sharief 0

1 answer

External ID – Microsoft Account (LiveID) Custom OIDC Provider Not Selected During Username Discovery

Hello Microsoft Support Team, I am experiencing an issue with Microsoft Account (MSA / LiveID) authentication in an External ID tenant and would like assistance understanding whether the current behavior is expected. Environment External ID Tenant …

asked

Abhiram Mangde 160

answered

AI answer

1 answer

Backup Authenticator without iCloud

Most Enterprise devices block iCloud backups. How can we backup Authenticator to Microsoft cloud/account on iPhone similar to Android?

asked

NickD 0

commented

Steven L 0

2 answers

MFA enrollment wizard loops indefinitely — personal MSA admin locked out of Entra external tenant

I'm the only admin of a Microsoft Entra External ID tenant, signing in with a personal Microsoft account (gmail). Since this week, every sign-in to entra.microsoft.com or portal.azure.com shows "Let's keep your account secure" — clicking Next…

asked

Jonathan Bush 0

answered

Dilawar Shaikh 0

1 answer

Global Admin cannot invite guest users – “Insufficient privileges”

I am a Global Administrator in our Microsoft Entra tenant. All guest invitations are failing with the message: “User invitation failed. Insufficient privileges to complete the operation.” This occurs for all users and all invite methods. This started…

asked

Allimoddin Saleemoddin Shaikh 0

answered

Jerald Felix 17,470 Volunteer Moderator

1 answer

External ID mixed user flow: returning federated users hit the local email/password screen on re-authentication instead of their IdP

TLDR: Returning federated users to an external entra sign in are presented with a pre-filled screen of their CIAM <guid>@<tenant>.onmicrosoft.com account - which they cannot use as they are federated and have to back out and re-choose their…

asked

Craig Rowe 0

commented

Craig Rowe 0

1 answer

Is "Remember MFA on trusted device" supported for external tenant accounts created through a user flow?

Here's the scenario I'm wondering about: I have setup an external tenant with Entra External ID. I have a sign-in / sign-up user flow created and associated with a .NET core application. A conditional access policy is setup to require MFA for all…

asked

Aaron-0171 20

edited a comment

Shah, Hardik 0

0 answers

I need help setting up a Microsoft work account and I want to make sure I don’t break anything.

Hi, I need help setting up a Microsoft work account and I want to make sure I don’t break anything. My situation: My company email runs on Google Workspace. It must keep working, I cannot lose email. I already have a Microsoft Entra tenant (I created…

asked

Sary Al Jalkh 0

edited the question

Sary Al Jalkh 0

1 answer

Entra external tenant - require risk remediation

From this documentation link: Require risk remediation is not supported for external and guest users because Microsoft Entra ID doesn't support session revocation for those users. Does require risk remediation apply to external users who are members…

asked

Aishah-9120 20

answered

Christos Panagiotidis 2,741

1 answer

CIAM External ID: Microsoft Account (MSA) federation failing with redirect_uri invalid

I have an external tenant. It has these identities configured (as a default, I did not add any of these identities manually): Microsoft Entra ID Email one-time passcode Microsoft When a user attempts to sign in with a Microsoft Account, the…

asked

Aishah-9120 20

answered

Christos Panagiotidis 2,741

1 answer

How to create a custom OTP email

I'm using Entra External ID along with msal for authenticating users. I would like to create a custom OTP email with my own branding. I attempted to follow the following article:…

asked

Beta Tester 0

commented

Beta Tester 0

1 answer

Accessing Partner VMs

Hi, How to Secure Access to Multiple Partner-Network VMs from the Corporate Network Using Single Sign-On (SSO), Eliminating Multiple Passwords without compromising security and compliance. Thank you!!

asked

Paramesh Kumar Bada 20

accepted

Paramesh Kumar Bada 20

1 answer

Unable to delete orphaned Microsoft.AzureActiveDirectory/ciamDirectories resource after failed provisioning

I created a Microsoft Entra External ID (CIAM) tenant from Azure Portal. Provisioning failed. Now the resource still exists inside Azure Resource Manager. Resource type: Microsoft.AzureActiveDirectory/ciamDirectories ProvisioningState: Failed Tenant…

asked

Mauricio Ribeiro Monteiro 0

answered

Jerald Felix 17,470 Volunteer Moderator

Microsoft Security | Microsoft Entra | Microsoft Entra External ID

Filter

Content

4,035 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags

B2B guest invitations blocked tenant-wide — "Invitations are blocked for this directory due to suspicious activity" — request review and removal of block

External ID (CIAM): local email+password sign-ins for some users no longer validated in our tenant; admin password resets ineffective

Azure AD B2C Supported Countries for SMS

EEID to Entra ID OIDC federation with private_key_jwt not client_secret

Entra External Id: Password Change Experience for Authenticated Customers

"A transient error has occurred. Please try again." with code 90202

Mandatory passkeys guidance

Users from internal domain rpsconsulting.in are able to access the application, but external users are unable to access, we have also configure B2B collabration

External ID – Microsoft Account (LiveID) Custom OIDC Provider Not Selected During Username Discovery

Backup Authenticator without iCloud

MFA enrollment wizard loops indefinitely — personal MSA admin locked out of Entra external tenant

Global Admin cannot invite guest users – “Insufficient privileges”

External ID mixed user flow: returning federated users hit the local email/password screen on re-authentication instead of their IdP

Is "Remember MFA on trusted device" supported for external tenant accounts created through a user flow?

I need help setting up a Microsoft work account and I want to make sure I don’t break anything.

Entra external tenant - require risk remediation

CIAM External ID: Microsoft Account (MSA) federation failing with redirect_uri invalid

How to create a custom OTP email

Accessing Partner VMs

Unable to delete orphaned Microsoft.AzureActiveDirectory/ciamDirectories resource after failed provisioning