Microsoft Security Microsoft Entra Microsoft Entra External ID

1 answer

Microsoft Entra External ID – Authentication and MFA guidance

Hi All, We are evaluating Microsoft Entra External ID as the identity provider for our existing customer-facing web application, and need guidance on the supported MFA methods for local (email + password) users, specifically whether the Microsoft…

asked

Mamatha A 26

commented

RoryB 705

1 answer

Global Admin getting "Insufficient Privileges" on guest invitation after bulk invite (Free Tier)

Hi team, I am a Global Administrator on a free Microsoft Entra ID tenant. I recently attempted a bulk invitation of 11 external users for a legitimate business project. Immediately after, our directory-wide ability to invite guest users was completely…

asked

Veeresha 0

commented

Abdul Waqas 265

0 answers

Azure Entra Id unable to invite external user

I am a Global Administrator in our Microsoft Entra tenant. All guest invitations are failing with the message: “User invitation failed. Insufficient privileges to complete the operation.” This occurs for all users and all invite methods.

asked

Bruce Meier 0

0 answers

Entra: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help

Hello! We are encountering an issue with the Microsoft Entra Graph API batch endpoint for user invitations. We are trying to batch import users through the invitation batch API, but are receiving the following error: {'responses':…

asked

Vincent van den Berg 0

0 answers

Azure AD B2C to Entra External ID migration: interactive custom step during sign-in with session-persisted context

We have a reasonably complex CIAM architecture and are currently exploring options for migrating from Azure AD B2C to Entra External ID (or potentially another CIAM platform if External ID cannot support some of our requirements). Our initial discovery…

asked

Chris Beer 0

edited the question

Chris Beer 0

0 answers

Native authentication: an email OTP issued by resetpassword/v1.0/challenge is accepted as a valid mfa_oob code on an unrelated oauth2/v2.0 sign-in MFA continuation token

Related to the already-acknowledged bug in this thread (resend not invalidating the previous OTP within the same flow). We found a more severe variant: an OTP code issued by a completely different flow (self-service password reset) is accepted to satisfy…

asked

Aleksandr Mulgachev 0

2 answers

EntraID external tenant - OIDC federation with another idp - domain_hint not honored

Scenario Az Entra ID external tenant Federation with another idp (Auth0) with OIDC . I am able to sign in using a user on idp to an app registration (SPN). During sign up it presents the MS login screen where you enter email and it does home realm…

asked

Martin Kallukalam 555

commented

Martin Kallukalam 555

0 answers

domain_hint with an Okta issuer host is intercepted by home-realm discovery instead of selecting the custom OIDC provider (External ID external tenant)

We have a Microsoft Entra External ID external tenant with a self-service sign-up user flow containing a single custom OpenID Connect identity provider that federates to an Okta org Issuer: https://<org>.okta.com Well-known endpoint:…

asked

Chintan Sukhadiya 0

0 answers

B2B guest invitations blocked tenant-wide - "Invitations are blocked for this directory due to suspicious activity" - request Entra ID team review

All outbound B2B guest invitations from our tenant fail with: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help. The Entra portal additionally surfaces "User's properties could not be…

asked

Nick Abokotoks 0

1 answer

External ID in an external tenant: How to register multiple MFA methods

I uses the native authentication in my SPA app. When users encounter the AuthMethodRegistrationRequiredState during login, they can use the following process to register an MFA…

asked

TU2 15

commented

Alex Leach 25

0 answers

Join: Microsoft Azure Q&A Champions Program

The Microsoft Azure Q&A Champions Program recognizes and empowers a global community of internal and external Azure experts who help customers succeed by providing high-quality, trusted answers on Microsoft Q&A. The program scales expert led…

asked

Ashley Swearingen 0 Microsoft External Staff Moderator

2 answers

Direct Password Reset URL / User Flow for Microsoft Entra External ID (CIAM)

We are evaluating Microsoft Entra External ID (External Tenant) and are looking for functionality similar to Azure AD B2C's dedicated Password Reset User Flow. In Azure AD B2C, we can create a standalone Password Reset policy/user flow and provide users…

asked

Naman Gupta 0

answered

RoryB 705

1 answer

Guest invitations are blocked due to suspicious activity in Microsoft Entra ID

In our tenant, guest invitations in Microsoft Entra ID B2B collaboration are blocked. Users/admins receive the message: "Invitations to this directory have been blocked due to suspicious activity. Contact Microsoft support for…

asked

MICHAŁ MATHIAK 0

edited an answer

Bence Weiszmann 1,395

0 answers

AADSTS500207 calling the new credential management API (Me-CredentialProfileManagement) with an External ID (CIAM) local account

We're trying to use the new preview credential management API (https://learn.microsoft.com/en-us/entra/identity-platform/reference-credential-management-api) to self-service register a passkey for a signed-in customer in a Microsoft Entra External ID…

asked

Pradeep Parmar 0

2 answers

Self registration portal in Entra ID for Guest accounts

Hi, In entra ID is it possible to setup a self registration portal for the guest account so can use that and register the accounts in entra ID instead of the admin sending the guest invite manaully. If there is such optioin how to enable that and what is…

asked

SAGA 45

commented

Bence Weiszmann 1,395

0 answers

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

I have a tenant to have a MS Team for a workplace club with my collegues. My work doesn't let us have it at the work tenant. When I try to invite my collegues something went blocked. It says "Invitations are blocked for this directory due to…

asked

Gabriel Fjellander 0

0 answers

Error after marking the account as internal. "interaction_required: AADSTS16000: User account from identity provider; does not exist in tenant 'Microsoft Services' and cannot access the application;

I have found the solution... thank you! No actions required...

asked

Fabio Godinho 0

edited the question

Fabio Godinho 0

1 answer

How to add owner in enterprise application ealiear user unable to add another user as they dont have access to there sc alt account

We have enterprise application and there are 2 owner both have scalt login email but they are unable to login with scalt and we need to add token configuration which require owner so is it possible to add their @microsoft email as owner let me know if…

asked

Hirachand Mudhale (INFOSYS LIMITED) 0 Microsoft External Staff

answered

AI answer

1 answer

Azure admin account lost after EXT conversion

Hi, I had an account at ******@mycompany.com to access my Azure portal. I also had a personal account with the same address to access my Microsoft account. I requested to integrate the Azure tenant from the Power Platform, thinking they would merge. In…

asked

CTD LTD 0

answered

CTD LTD 0

0 answers

Gaining access to the Azure AD / Entra ID B2C tenants before gracefully decommissioning it.

I am trying to gain access to many of the unused or neglected Azure AD B2C tenants that were created in my Azure platform https://portal.azure.com/#browse/Microsoft.AzureActiveDirectory%2Fb2cDirectories before decommissioning them properly using this…

asked

EnterpriseArchitect 6,391

Microsoft Security | Microsoft Entra | Microsoft Entra External ID

Filter

Answers

Comments

4,068 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags

Microsoft Entra External ID – Authentication and MFA guidance

Global Admin getting "Insufficient Privileges" on guest invitation after bulk invite (Free Tier)

Azure Entra Id unable to invite external user

Entra: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help

Azure AD B2C to Entra External ID migration: interactive custom step during sign-in with session-persisted context

Native authentication: an email OTP issued by resetpassword/v1.0/challenge is accepted as a valid mfa_oob code on an unrelated oauth2/v2.0 sign-in MFA continuation token

EntraID external tenant - OIDC federation with another idp - domain_hint not honored

domain_hint with an Okta issuer host is intercepted by home-realm discovery instead of selecting the custom OIDC provider (External ID external tenant)

B2B guest invitations blocked tenant-wide - "Invitations are blocked for this directory due to suspicious activity" - request Entra ID team review

External ID in an external tenant: How to register multiple MFA methods

Join: Microsoft Azure Q&A Champions Program

Direct Password Reset URL / User Flow for Microsoft Entra External ID (CIAM)

Guest invitations are blocked due to suspicious activity in Microsoft Entra ID

AADSTS500207 calling the new credential management API (Me-CredentialProfileManagement) with an External ID (CIAM) local account

Self registration portal in Entra ID for Guest accounts

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

Error after marking the account as internal. "interaction_required: AADSTS16000: User account from identity provider; does not exist in tenant 'Microsoft Services' and cannot access the application;

How to add owner in enterprise application ealiear user unable to add another user as they dont have access to there sc alt account

Azure admin account lost after EXT conversion

Gaining access to the Azure AD / Entra ID B2C tenants before gracefully decommissioning it.