Microsoft Security Microsoft Entra Microsoft Entra External ID

2 answers

EntraID external tenant - OIDC federation with another idp - domain_hint not honored

Scenario Az Entra ID external tenant Federation with another idp (Auth0) with OIDC . I am able to sign in using a user on idp to an app registration (SPN). During sign up it presents the MS login screen where you enter email and it does home realm…

asked

Martin Kallukalam 555

commented

RoryB 700

0 answers

domain_hint with an Okta issuer host is intercepted by home-realm discovery instead of selecting the custom OIDC provider (External ID external tenant)

We have a Microsoft Entra External ID external tenant with a self-service sign-up user flow containing a single custom OpenID Connect identity provider that federates to an Okta org Issuer: https://<org>.okta.com Well-known endpoint:…

asked

Chintan Sukhadiya 0

0 answers

B2B guest invitations blocked tenant-wide - "Invitations are blocked for this directory due to suspicious activity" - request Entra ID team review

All outbound B2B guest invitations from our tenant fail with: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help. The Entra portal additionally surfaces "User's properties could not be…

asked

Nick Abokotoks 0

1 answer

Microsoft Entra External ID – Authentication and MFA guidance

Hi All, We are evaluating Microsoft Entra External ID as the identity provider for our existing customer-facing web application, and need guidance on the supported MFA methods for local (email + password) users, specifically whether the Microsoft…

asked

Mamatha A 26

commented

Mamatha A 26

1 answer

External ID in an external tenant: How to register multiple MFA methods

I uses the native authentication in my SPA app. When users encounter the AuthMethodRegistrationRequiredState during login, they can use the following process to register an MFA…

asked

TU2 15

commented

Alex Leach 25

0 answers

Global Admin getting "Insufficient Privileges" on guest invitation after bulk invite (Free Tier)

Hi team, I am a Global Administrator on a free Microsoft Entra ID tenant. I recently attempted a bulk invitation of 11 external users for a legitimate business project. Immediately after, our directory-wide ability to invite guest users was completely…

asked

Veeresha 0

edited the question

Jack-Bu 6,775 Microsoft External Staff Moderator

0 answers

Join: Microsoft Azure Q&A Champions Program

The Microsoft Azure Q&A Champions Program recognizes and empowers a global community of internal and external Azure experts who help customers succeed by providing high-quality, trusted answers on Microsoft Q&A. The program scales expert led…

asked

Ashley Swearingen 0 Microsoft External Staff Moderator

2 answers

Direct Password Reset URL / User Flow for Microsoft Entra External ID (CIAM)

We are evaluating Microsoft Entra External ID (External Tenant) and are looking for functionality similar to Azure AD B2C's dedicated Password Reset User Flow. In Azure AD B2C, we can create a standalone Password Reset policy/user flow and provide users…

asked

Naman Gupta 0

answered

RoryB 700

1 answer

Guest invitations are blocked due to suspicious activity in Microsoft Entra ID

In our tenant, guest invitations in Microsoft Entra ID B2B collaboration are blocked. Users/admins receive the message: "Invitations to this directory have been blocked due to suspicious activity. Contact Microsoft support for…

asked

MICHAŁ MATHIAK 0

edited an answer

Bence Weiszmann 985

0 answers

AADSTS500207 calling the new credential management API (Me-CredentialProfileManagement) with an External ID (CIAM) local account

We're trying to use the new preview credential management API (https://learn.microsoft.com/en-us/entra/identity-platform/reference-credential-management-api) to self-service register a passkey for a signed-in customer in a Microsoft Entra External ID…

asked

Pradeep Parmar 0

2 answers

Self registration portal in Entra ID for Guest accounts

Hi, In entra ID is it possible to setup a self registration portal for the guest account so can use that and register the accounts in entra ID instead of the admin sending the guest invite manaully. If there is such optioin how to enable that and what is…

asked

SAGA 45

commented

Bence Weiszmann 985

0 answers

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

I have a tenant to have a MS Team for a workplace club with my collegues. My work doesn't let us have it at the work tenant. When I try to invite my collegues something went blocked. It says "Invitations are blocked for this directory due to…

asked

Gabriel Fjellander 0

0 answers

Error after marking the account as internal. "interaction_required: AADSTS16000: User account from identity provider; does not exist in tenant 'Microsoft Services' and cannot access the application;

I have found the solution... thank you! No actions required...

asked

Fabio Godinho 0

edited the question

Fabio Godinho 0

1 answer

How to add owner in enterprise application ealiear user unable to add another user as they dont have access to there sc alt account

We have enterprise application and there are 2 owner both have scalt login email but they are unable to login with scalt and we need to add token configuration which require owner so is it possible to add their @microsoft email as owner let me know if…

asked

Hirachand Mudhale (INFOSYS LIMITED) 0 Microsoft External Staff

answered

AI answer

1 answer

Azure admin account lost after EXT conversion

Hi, I had an account at ******@mycompany.com to access my Azure portal. I also had a personal account with the same address to access my Microsoft account. I requested to integrate the Azure tenant from the Power Platform, thinking they would merge. In…

asked

CTD LTD 0

answered

CTD LTD 0

0 answers

Gaining access to the Azure AD / Entra ID B2C tenants before gracefully decommissioning it.

I am trying to gain access to many of the unused or neglected Azure AD B2C tenants that were created in my Azure platform https://portal.azure.com/#browse/Microsoft.AzureActiveDirectory%2Fb2cDirectories before decommissioning them properly using this…

asked

EnterpriseArchitect 6,391

0 answers

Unable to invite external B2B guest users – invitations blocked due to suspicious activity

Hello Microsoft Team, We are unable to invite any external B2B guest users to our Microsoft Entra ID tenant. All invitation methods fail (Entra Admin Center, SharePoint Online, OneDrive and Microsoft Graph API) with the following error: "Invitations…

asked

Tom Gl 0

edited the question

Tom Gl 0

2 answers

Azure AD B2C user flow not visible in portal or Graph list but still accessible by ID and working

We are experiencing a strange issue with an Azure AD B2C tenant where an existing user flow appears to be partially invisible. Our tenant is xxxxxxxxxx.onmicrosoft.com. We have a user flow named B2C_1_signin that is currently used by several applications…

asked

Fabien 0

commented

Arjan van Hugten 0

0 answers

Microsoft Entra External ID tenant stuck in Provisioning with zero tenantId after 404

Hello, I am unable to create a Microsoft Entra External ID (CIAM) tenant. The operation started on 12 August 2026 at 14:14 UTC and remains in “Provisioning” far beyond the documented creation time. Domain: pawwingsorg.onmicrosoft.com Resource group:…

asked

Samet Sığırcı 0

1 answer

Move to phishing-resistant authentication before SMS and voice retire

We received the Microsoft notice “Move to phishing-resistant authentication before SMS and voice retire,” stating that Microsoft-provided SMS and voice authentication will retire on February 1, 2027. Our production Azure AD B2C tenant uses IEF custom…

asked

Scott Weathers 20

accepted

Scott Weathers 20

Microsoft Security | Microsoft Entra | Microsoft Entra External ID

Filter

Answers

Comments

4,064 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags

EntraID external tenant - OIDC federation with another idp - domain_hint not honored

domain_hint with an Okta issuer host is intercepted by home-realm discovery instead of selecting the custom OIDC provider (External ID external tenant)

B2B guest invitations blocked tenant-wide - "Invitations are blocked for this directory due to suspicious activity" - request Entra ID team review

Microsoft Entra External ID – Authentication and MFA guidance

External ID in an external tenant: How to register multiple MFA methods

Global Admin getting "Insufficient Privileges" on guest invitation after bulk invite (Free Tier)

Join: Microsoft Azure Q&A Champions Program

Direct Password Reset URL / User Flow for Microsoft Entra External ID (CIAM)

Guest invitations are blocked due to suspicious activity in Microsoft Entra ID

AADSTS500207 calling the new credential management API (Me-CredentialProfileManagement) with an External ID (CIAM) local account

Self registration portal in Entra ID for Guest accounts

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

Error after marking the account as internal. "interaction_required: AADSTS16000: User account from identity provider; does not exist in tenant 'Microsoft Services' and cannot access the application;

How to add owner in enterprise application ealiear user unable to add another user as they dont have access to there sc alt account

Azure admin account lost after EXT conversion

Gaining access to the Azure AD / Entra ID B2C tenants before gracefully decommissioning it.

Unable to invite external B2B guest users – invitations blocked due to suspicious activity

Azure AD B2C user flow not visible in portal or Graph list but still accessible by ID and working

Microsoft Entra External ID tenant stuck in Provisioning with zero tenantId after 404

Move to phishing-resistant authentication before SMS and voice retire