4,074 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags

Sort by: Updated
Updated Created Answers
1 answer

Guest Account Locked – Unable to Identify Support Contact

Hello, My guest account ([Moderator note: Personally Identifiable Information removed]@turntown.com) has been locked, and I am receiving the following error during sign-in: "Your account has been locked. Contact your support person to unlock it,…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-10T06:56:55.7166667+00:00
Somil Mehra 0 Reputation points
edited the question 2026-09-10T11:58:17.1266667+00:00
Daniel-Vo 6,275 Reputation points Microsoft External Staff Moderator
0 answers

External ID credential management API refuses customer accounts with AADSTS500207

We are implementing self-service passkey registration for customers per https://learn.microsoft.com/en-us/entra/identity-platform/reference-credential-management-api. Every prerequisite is in place: the API's service principal (appId 6bf38b3c-xxxx,…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-10T08:19:50.3733333+00:00
Rodolfo Grave 25 Reputation points
0 answers

Microsoft Entra External ID: no South American countries available as Country/Region when creating an external tenant

We are creating a Microsoft Entra External ID tenant for a system currently under development—a customer-facing application operated from Chile. During external tenant creation, Chile is not available in the Country/Region selector. We also verified that…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-09T05:41:50.5+00:00
RobertGsw 0 Reputation points
edited the question 2026-09-09T14:37:14.9133333+00:00
RobertGsw 0 Reputation points
1 answer One of the answers was accepted by the question author.

Unable to access old Azure tenant due to AADSTS16000 and remove linked payment card

I need assistance with an old Azure billing relationship associated with my personal Microsoft account. My Microsoft account uses a live.com address. In the Microsoft Account payment settings, I have an expired MasterCard ending in **** that I want to…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-08-26T14:19:49.3266667+00:00
Андрей VESO Костюнин 20 Reputation points
edited the question 2026-09-09T09:31:01.44+00:00
Suchitra Suregaunkar 16,780 Reputation points Microsoft External Staff Moderator
1 answer

B2B guest invitations are blocked for this tenant due to suspicious activity

Hello Microsoft Support, We are experiencing a critical issue with B2B guest invitations in our Microsoft Entra ID tenant. As part of a legitimate customer onboarding / SSO rollout, we invited a large number of external users for our client organisation.…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-04T05:04:08.3466667+00:00
dvibe 0 Reputation points
answered 2026-09-08T12:23:55.72+00:00
David Broggy 6,801 Reputation points MVP
0 answers

External tenant provisioning

External tenant provisioning is stuck. The Azure resource exists, but Tenant ID is 0 and the tenant cannot be accessed

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-08T08:05:53.11+00:00
Sonny Hoang 0 Reputation points
1 answer

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

We have been creating an application and inviting a pilot set of users (one by one) using invitations for months without any issues. Today, were trying to add in around 800 users so that they could access our application. After adding in users (98…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-04-30T11:57:11.3333333+00:00
Manek Ravi 5 Reputation points
commented 2026-09-07T03:10:22.0533333+00:00
dvibe 0 Reputation points
1 answer

domain_hint with an Okta issuer host is intercepted by home-realm discovery instead of selecting the custom OIDC provider (External ID external tenant)

We have a Microsoft Entra External ID external tenant with a self-service sign-up user flow containing a single custom OpenID Connect identity provider that federates to an Okta org Issuer: https://<org>.okta.com Well-known endpoint:…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-08-31T17:43:59.53+00:00
Chintan Sukhadiya 0 Reputation points
answered 2026-09-04T10:14:00.76+00:00
Chintan Sukhadiya 0 Reputation points
1 answer One of the answers was accepted by the question author.

Microsoft Entra External ID – Authentication and MFA guidance

Hi All, We are evaluating Microsoft Entra External ID as the identity provider for our existing customer-facing web application, and need guidance on the supported MFA methods for local (email + password) users, specifically whether the Microsoft…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-08-27T15:21:11.6866667+00:00
Mamatha A 26 Reputation points
commented 2026-09-03T22:20:19.1566667+00:00
RoryB 705 Reputation points
1 answer

Global Admin getting "Insufficient Privileges" on guest invitation after bulk invite (Free Tier)

Hi team, I am a Global Administrator on a free Microsoft Entra ID tenant. I recently attempted a bulk invitation of 11 external users for a legitimate business project. Immediately after, our directory-wide ability to invite guest users was completely…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-08-26T22:07:13.4233333+00:00
Veeresha 0 Reputation points
commented 2026-09-03T17:34:50.1766667+00:00
Abdul Waqas 345 Reputation points
0 answers

Azure Entra Id unable to invite external user

I am a Global Administrator in our Microsoft Entra tenant. All guest invitations are failing with the message: “User invitation failed. Insufficient privileges to complete the operation.” This occurs for all users and all invite methods.

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-03T14:21:13.85+00:00
Bruce Meier 0 Reputation points
0 answers

Entra: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help

Hello! We are encountering an issue with the Microsoft Entra Graph API batch endpoint for user invitations. We are trying to batch import users through the invitation batch API, but are receiving the following error: {'responses':…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-03T08:41:44.97+00:00
Vincent van den Berg 0 Reputation points
0 answers

Azure AD B2C to Entra External ID migration: interactive custom step during sign-in with session-persisted context

We have a reasonably complex CIAM architecture and are currently exploring options for migrating from Azure AD B2C to Entra External ID (or potentially another CIAM platform if External ID cannot support some of our requirements). Our initial discovery…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-01T16:20:49.19+00:00
Chris Beer 0 Reputation points
edited the question 2026-09-01T16:22:49.3466667+00:00
Chris Beer 0 Reputation points
0 answers

Native authentication: an email OTP issued by resetpassword/v1.0/challenge is accepted as a valid mfa_oob code on an unrelated oauth2/v2.0 sign-in MFA continuation token

Related to the already-acknowledged bug in this thread (resend not invalidating the previous OTP within the same flow). We found a more severe variant: an OTP code issued by a completely different flow (self-service password reset) is accepted to satisfy…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-01T15:33:19.05+00:00
Aleksandr Mulgachev 0 Reputation points
2 answers

EntraID external tenant - OIDC federation with another idp - domain_hint not honored

Scenario Az Entra ID external tenant Federation with another idp (Auth0) with OIDC . I am able to sign in using a user on idp to an app registration (SPN). During sign up it presents the MS login screen where you enter email and it does home realm…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-09-08T02:24:16.9766667+00:00
Martin Kallukalam 555 Reputation points
commented 2026-09-01T12:42:44.81+00:00
Martin Kallukalam 555 Reputation points
0 answers

B2B guest invitations blocked tenant-wide - "Invitations are blocked for this directory due to suspicious activity" - request Entra ID team review

All outbound B2B guest invitations from our tenant fail with: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help. The Entra portal additionally surfaces "User's properties could not be…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-08-31T14:57:50.1+00:00
Nick Abokotoks 0 Reputation points
1 answer

External ID in an external tenant: How to register multiple MFA methods

I uses the native authentication in my SPA app. When users encounter the AuthMethodRegistrationRequiredState during login, they can use the following process to register an MFA…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-05-27T13:57:06.2666667+00:00
TU2 15 Reputation points
commented 2026-08-31T06:25:41.83+00:00
Alex Leach 25 Reputation points
0 answers

Join: Microsoft Azure Q&A Champions Program

The Microsoft Azure Q&A Champions Program recognizes and empowers a global community of internal and external Azure experts who help customers succeed by providing high-quality, trusted answers on Microsoft Q&A. The program scales expert led…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-08-26T20:08:33.1666667+00:00
Ashley Swearingen 0 Reputation points Microsoft External Staff Moderator
2 answers

Direct Password Reset URL / User Flow for Microsoft Entra External ID (CIAM)

We are evaluating Microsoft Entra External ID (External Tenant) and are looking for functionality similar to Azure AD B2C's dedicated Password Reset User Flow. In Azure AD B2C, we can create a standalone Password Reset policy/user flow and provide users…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-08-24T08:41:37.25+00:00
Naman Gupta 0 Reputation points
answered 2026-08-26T04:41:06.59+00:00
RoryB 705 Reputation points
1 answer

Guest invitations are blocked due to suspicious activity in Microsoft Entra ID

In our tenant, guest invitations in Microsoft Entra ID B2B collaboration are blocked. Users/admins receive the message: "Invitations to this directory have been blocked due to suspicious activity. Contact Microsoft support for…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-08-25T12:28:20.7766667+00:00
MICHAŁ MATHIAK 0 Reputation points
edited an answer 2026-08-25T19:51:03.28+00:00
Bence Weiszmann 1,555 Reputation points