4,102 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags

Sort by: Updated
0 answers

AADSTS1000015 on On-Behalf-Of flow for users federated from Microsoft Entra ID (custom OIDC IdP) in an external tenant

Summary In a Microsoft Entra External ID external tenant, users who sign in through a Microsoft Entra ID tenant configured as a custom OpenID Connect identity provider (as documented in…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-15T07:59:41.66+00:00
Stuart Rowcliffe 0 Reputation points
1 answer

Microsoft Graph PATCH to b2bManagementPolicies returns 404 Request_ResourceNotFound while GET succeeds

I am developing a Windows PowerShell 5.1 script to manage the allowed-domain list for Microsoft Entra B2B guest invitations using certificate-based app-only authentication. Authentication succeeds, and I can retrieve the existing B2B management policy…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-14T19:22:27.57+00:00
Ganga Raju 0 Reputation points
commented 2026-10-14T19:24:32.6333333+00:00
Ganga Raju 0 Reputation points
0 answers

CRITICAL ISSUE: Microsoft EntraID signin-fabric_v2_pl_…js 404 (POLISH) (signin-fabric_v2_en - works)

Polish initial page: login-fabric_v2_pl_…js**200 **Polish next page: signin-fabric_v2_pl_…js**404 / WebContentNotFound **English next page: signin-fabric_v2_en_…js200

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-13T06:53:41.89+00:00
stay sharp 0 Reputation points
commented 2026-10-14T12:53:09.92+00:00
Bret Brutlag 0 Reputation points
1 answer

App role missing on service principal although present on app registration; Application permissions disabled and admin consent fails

Summary An app role defined on an app registration was never synchronized to the corresponding service principal in the same tenant. As a result, the portal's "Application permissions" option was disabled for that API, and admin consent failed.…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-11T19:34:47.1166667+00:00
Sam Wheat 506 Reputation points
commented 2026-10-13T15:28:04.3633333+00:00
Sam Wheat 506 Reputation points
1 answer

Entra External ID: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help

We recently deployed Entra External ID and i need to bulk invite about 1250 accounts trought he graph api. The first 100 went fine, but then this error message "Invitations are blocked for this directory due to suspicious activity. Please contact…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-12T08:30:16.75+00:00
Christiaan Neijens 36 Reputation points
commented 2026-10-13T15:07:57.5333333+00:00
Christiaan Neijens 36 Reputation points
1 answer

Microsoft Entra B2B Guest Invitations Blocked Due to Suspicious Activity – Request to Unblock Tenant

Hello, I'm experiencing an issue with Microsoft Entra B2B guest invitations and would appreciate assistance in resolving it. I'm the Global Administrator for a small business using Microsoft 365 Business Basic. We have been setting up SharePoint…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-11T13:39:20.4366667+00:00
Sarah Orchard 0 Reputation points
answered 2026-10-11T13:40:00.57+00:00

AI answer

1 answer

Logging in to account and payment for subscription

Hi, I have had emails flagging my Azure subscription (which is a PAYG with a credit card) needs updating. It is only about 25p per month as I have deleted the various services some time ago. However, I currently can not log into my Azure account. When I…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-11T11:14:25.2033333+00:00
Andy Hayward 0 Reputation points
answered 2026-10-11T11:37:52.02+00:00
Andy Hayward 0 Reputation points
0 answers

External tenant: “Keep your account secure” returns BadRequest for an internal admin account — how should admins register MFA?

We have a Microsoft Entra External ID external tenant (customer configuration). Security defaults are enabled. There is one Conditional Access policy in report-only mode; the sign-ins we inspected show Conditional Access “Not applied.” We created a…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-10T15:35:04.7133333+00:00
Robert Gilchrist 0 Reputation points
0 answers

Cannot leave Microsoft Entra B2B tenant because guest account is locked

My home account is ******@ut.ee. Under My Account → Organizations → Other organizations I have an organization named Microsoft. Tenant ID: 72f988bf-86f1-41af-91ab-2d7cd011db47 When I select Leave, authentication fails with: “Your account has been locked.…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-10T06:51:42.5666667+00:00
Taavi Tamberg 0 Reputation points
2 answers

Entra External ID – OTP Validity & Customization

I have configured an Entra External ID tenant with user flows for sign-up and password reset. During both processes, users receive a one-time passcode (OTP) by email. What is the default validity period of the OTP? Can the OTP length and the validity be…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2025-12-06T04:32:23.3533333+00:00
Saravana Kumar Palanisamy 30 Reputation points
answered 2026-10-08T08:05:48.5233333+00:00
Mon Le (WICLOUD CORPORATION) 0 Reputation points Microsoft External Staff
1 answer

Entra ID B2B invitations blocked due to suspicious activity on new tenant (no direct support available)

We have a Microsoft Entra ID tenant where ALL B2B invitations are blocked. Error returned by the portal and Microsoft Graph: "Invitations are blocked for this directory due to suspicious activity" Context: Only ~12 manual B2B invitations…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-04-21T10:45:45.41+00:00
Cristiano Quadrini 5 Reputation points
answered 2026-10-08T06:48:04.3566667+00:00
0 answers

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help

Hello Microsoft Support, Tenant ID: We are experiencing a critical issue with our Azure AD tenant. All guest invitations are now failing with the following error from the Graph API: { "error": { "code": "Forbidden",…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-08T02:25:31.9733333+00:00
Bing Cheng 0 Reputation points
commented 2026-10-08T02:27:04.5466667+00:00
Bing Cheng 0 Reputation points
1 answer

Native authentication: an email OTP issued by resetpassword/v1.0/challenge is accepted as a valid mfa_oob code on an unrelated oauth2/v2.0 sign-in MFA continuation token

Related to the already-acknowledged bug in this thread (resend not invalidating the previous OTP within the same flow). We found a more severe variant: an OTP code issued by a completely different flow (self-service password reset) is accepted to satisfy…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-01T15:33:19.05+00:00
Aleksandr Mulgachev 0 Reputation points
commented 2026-10-07T10:30:19.22+00:00
Aleksandr Mulgachev 0 Reputation points
0 answers

Microsoft Entra External ID Native Authentication API allows users to reuse their current password

We are using Microsoft Entra External ID Native Authentication API for customer accounts. We implemented the Change Password flow using the Native Authentication SSPR APIs: /resetpassword/v1.0/start /resetpassword/v1.0/challenge …

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-07T08:21:50.2966667+00:00
Warren Pham 0 Reputation points
3 answers

Entra External ID Native Authentication - OTP not invalidated after resend on signup and SSPR flows

We are using Microsoft Entra External ID native authentication API for a customer-facing web application using the email with password authentication method. Issue: After calling /signup/v1.0/challenge again on the same continuation token to resend a new…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-05-15T09:12:55.9133333+00:00
Ashok Kumar Busi 6 Reputation points
answered 2026-10-07T07:49:31.9933333+00:00
Aleksandr Mulgachev 0 Reputation points
0 answers

How is authentication state handled in Microsoft Entra External ID?

Microsoft Entra External ID: What happens behind the authentication flow at the HTTP/session level? Hello, I’m a self-taught software developer and Python programmer with around four years of experience. Over the past few years, I’ve become particularly…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-05T10:00:51.9833333+00:00
Nayef Ashour 0 Reputation points
0 answers

Entra External ID: Sign in with Apple doesn't pre-fill first/last name. Apple sends user.name but Entra holds null at OnAttributeCollectionStart

Summary In an external tenant with the built-in Apple identity provider, a brand-new Apple sign-up shows the hosted attribute collection page with First name, Last name and Display name blank. The same user flow with Google pre-fills them, and email…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-09-25T00:44:27.7333333+00:00
LGem 0 Reputation points
edited the question 2026-10-02T00:37:31.14+00:00
LGem 0 Reputation points
1 answer

Microsoft Entra External ID external tenant creation - Azure subscription not available

Microsoft Entra External ID external tenant creation - Azure subscription not available Azure Subscription 1 is Active and my account is Subscription Owner. I have also assigned my account the Microsoft Entra Tenant Creator role. In Microsoft Entra admin…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-01T19:58:21.33+00:00
Rizwaan M 0 Reputation points
answered 2026-10-01T19:58:37.38+00:00

AI answer

0 answers

Entra External ID: Safari macOS signup returns AADSTS50021 after email OTP, before password creation

Hello, Has anyone encountered an initial email/password signup failure specifically in Safari on macOS with Microsoft Entra External ID? We use an external tenant with sign-up/sign-in user flows configured for email and password authentication. Expected…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-01T09:27:37.2633333+00:00
Jules Maglione 0 Reputation points
0 answers

Entra B2B Invitation Quota – Daily Reset and resetRedemption

Microsoft's documentation states the following service limit for Workforce and external tenants without paid licenses: Tenants ≤ 30 days old: 10 invitations per day Tenants > 30 days old: 100 invitations per day We have a few questions regarding…

Microsoft Security | Microsoft Entra | Microsoft Entra External ID
asked 2026-10-01T09:19:57.8333333+00:00
nagg-hash 20 Reputation points