Managing external identities to enable secure access for partners, customers, and other non-employees
4,102 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags
AADSTS1000015 on On-Behalf-Of flow for users federated from Microsoft Entra ID (custom OIDC IdP) in an external tenant
Summary In a Microsoft Entra External ID external tenant, users who sign in through a Microsoft Entra ID tenant configured as a custom OpenID Connect identity provider (as documented in…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Microsoft Graph PATCH to b2bManagementPolicies returns 404 Request_ResourceNotFound while GET succeeds
I am developing a Windows PowerShell 5.1 script to manage the allowed-domain list for Microsoft Entra B2B guest invitations using certificate-based app-only authentication. Authentication succeeds, and I can retrieve the existing B2B management policy…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
CRITICAL ISSUE: Microsoft EntraID signin-fabric_v2_pl_…js 404 (POLISH) (signin-fabric_v2_en - works)
Polish initial page: login-fabric_v2_pl_…js**200 **Polish next page: signin-fabric_v2_pl_…js**404 / WebContentNotFound **English next page: signin-fabric_v2_en_…js200
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
App role missing on service principal although present on app registration; Application permissions disabled and admin consent fails
Summary An app role defined on an app registration was never synchronized to the corresponding service principal in the same tenant. As a result, the portal's "Application permissions" option was disabled for that API, and admin consent failed.…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Entra External ID: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help
We recently deployed Entra External ID and i need to bulk invite about 1250 accounts trought he graph api. The first 100 went fine, but then this error message "Invitations are blocked for this directory due to suspicious activity. Please contact…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Microsoft Entra B2B Guest Invitations Blocked Due to Suspicious Activity – Request to Unblock Tenant
Hello, I'm experiencing an issue with Microsoft Entra B2B guest invitations and would appreciate assistance in resolving it. I'm the Global Administrator for a small business using Microsoft 365 Business Basic. We have been setting up SharePoint…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
AI answer
Logging in to account and payment for subscription
Hi, I have had emails flagging my Azure subscription (which is a PAYG with a credit card) needs updating. It is only about 25p per month as I have deleted the various services some time ago. However, I currently can not log into my Azure account. When I…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
External tenant: “Keep your account secure” returns BadRequest for an internal admin account — how should admins register MFA?
We have a Microsoft Entra External ID external tenant (customer configuration). Security defaults are enabled. There is one Conditional Access policy in report-only mode; the sign-ins we inspected show Conditional Access “Not applied.” We created a…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Cannot leave Microsoft Entra B2B tenant because guest account is locked
My home account is ******@ut.ee. Under My Account → Organizations → Other organizations I have an organization named Microsoft. Tenant ID: 72f988bf-86f1-41af-91ab-2d7cd011db47 When I select Leave, authentication fails with: “Your account has been locked.…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Entra External ID – OTP Validity & Customization
I have configured an Entra External ID tenant with user flows for sign-up and password reset. During both processes, users receive a one-time passcode (OTP) by email. What is the default validity period of the OTP? Can the OTP length and the validity be…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Entra ID B2B invitations blocked due to suspicious activity on new tenant (no direct support available)
We have a Microsoft Entra ID tenant where ALL B2B invitations are blocked. Error returned by the portal and Microsoft Graph: "Invitations are blocked for this directory due to suspicious activity" Context: Only ~12 manual B2B invitations…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help
Hello Microsoft Support, Tenant ID: We are experiencing a critical issue with our Azure AD tenant. All guest invitations are now failing with the following error from the Graph API: { "error": { "code": "Forbidden",…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Native authentication: an email OTP issued by resetpassword/v1.0/challenge is accepted as a valid mfa_oob code on an unrelated oauth2/v2.0 sign-in MFA continuation token
Related to the already-acknowledged bug in this thread (resend not invalidating the previous OTP within the same flow). We found a more severe variant: an OTP code issued by a completely different flow (self-service password reset) is accepted to satisfy…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Microsoft Entra External ID Native Authentication API allows users to reuse their current password
We are using Microsoft Entra External ID Native Authentication API for customer accounts. We implemented the Change Password flow using the Native Authentication SSPR APIs: /resetpassword/v1.0/start /resetpassword/v1.0/challenge …
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Entra External ID Native Authentication - OTP not invalidated after resend on signup and SSPR flows
We are using Microsoft Entra External ID native authentication API for a customer-facing web application using the email with password authentication method. Issue: After calling /signup/v1.0/challenge again on the same continuation token to resend a new…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
How is authentication state handled in Microsoft Entra External ID?
Microsoft Entra External ID: What happens behind the authentication flow at the HTTP/session level? Hello, I’m a self-taught software developer and Python programmer with around four years of experience. Over the past few years, I’ve become particularly…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Entra External ID: Sign in with Apple doesn't pre-fill first/last name. Apple sends user.name but Entra holds null at OnAttributeCollectionStart
Summary In an external tenant with the built-in Apple identity provider, a brand-new Apple sign-up shows the hosted attribute collection page with First name, Last name and Display name blank. The same user flow with Google pre-fills them, and email…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Microsoft Entra External ID external tenant creation - Azure subscription not available
Microsoft Entra External ID external tenant creation - Azure subscription not available Azure Subscription 1 is Active and my account is Subscription Owner. I have also assigned my account the Microsoft Entra Tenant Creator role. In Microsoft Entra admin…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
AI answer
Entra External ID: Safari macOS signup returns AADSTS50021 after email OTP, before password creation
Hello, Has anyone encountered an initial email/password signup failure specifically in Safari on macOS with Microsoft Entra External ID? We use an external tenant with sign-up/sign-in user flows configured for email and password authentication. Expected…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Entra B2B Invitation Quota – Daily Reset and resetRedemption
Microsoft's documentation states the following service limit for Workforce and external tenants without paid licenses: Tenants ≤ 30 days old: 10 invitations per day Tenants > 30 days old: 100 invitations per day We have a few questions regarding…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees