A module within Microsoft Viva that serves as an enterprise social networking platform. It fosters community building, open dialogue, and knowledge sharing across an organization.
For this symptom, the most likely gap is that the user can authenticate, but the Viva Engage account is not fully matched to a Microsoft 365 identity or the tenant is enforcing Microsoft 365 identity/licensing requirements and the user is not fully provisioned in that path.
Use this admin checklist:
- Confirm the user exists in both Viva Engage and Microsoft 365 / Microsoft Entra ID
- In the Viva Engage admin center, export users from the data export page.
- Compare that user list with Microsoft 365 / Microsoft Entra ID.
- If the user exists in Viva Engage but not correctly matched in Microsoft 365 / Microsoft Entra ID, create or correct the Microsoft 365 identity mapping.
- Microsoft states that when Microsoft 365 identity is enforced, any user without the corresponding Microsoft 365 identity is locked out of Viva Engage.
- Audit the user’s Microsoft 365 identity match with the PowerShell audit process
- Use the Microsoft Entra ID module for Windows PowerShell.
- Run the
UserMatchToAzureAD.ps1process against the users exported from Viva Engage. - Review the output CSV and check whether the affected user shows
exists_in_azure_adasFALSE. - If so, either create the user in Microsoft 365 / Microsoft Entra ID or suspend the stale Viva Engage account if it should not exist.
- After correction, run the audit again to confirm the user is now found.
- Check whether Microsoft 365 identity enforcement / license enforcement is enabled
- If enforcement is enabled, each Viva Engage user must have:
- a Microsoft 365 license, and
- Viva Engage Core or Yammer Enterprise.
- This enforcement is irreversible.
- A user can sign in successfully but still be blocked from full access if the identity/license enforcement requirements are not fully satisfied.
- If enforcement is enabled, each Viva Engage user must have:
- Verify the service plan assignment at the user level
- Since the Viva Engage Core service plan was already checked, verify that it is actually applied to the affected user and not only enabled in the parent license configuration.
- Microsoft notes that bundled Microsoft 365 plans include Viva Engage Core, but access depends on the service plan being assigned to the user.
- PowerShell can be used to identify unlicensed users with:
Get-MsolUser -All -UnlicensedUsersOnly - PowerShell can also be used to manage or reapply the Viva Engage Core service plan.
- If using Teams or embedded experiences, verify Viva Engage sign-in is enabled in Microsoft Entra ID
- In Microsoft Entra admin center, go to Identity > Applications > Enterprise Applications > Viva Engage > Properties.
- Ensure Enabled for users to sign-in? is set to Yes.
- Also ensure the tenant does not block Viva Engage URLs and IPs.
- Retest after identity/license correction
- After fixing the identity match or service plan assignment, have the user sign out and sign in again.
- If Microsoft 365 identity enforcement was recently enabled, signing off current users can help ensure they reauthenticate with Microsoft 365 credentials.
Because the same user also fails in the Viva Engage Conversations SharePoint web part, the SharePoint failure is consistent with the underlying Viva Engage access problem rather than a SharePoint-only issue.
The supported remediation path is therefore:
- audit the user’s Viva Engage-to-Microsoft 365 identity match,
- correct any missing or stale Microsoft 365 / Entra ID mapping,
- verify the user truly has Viva Engage Core or Yammer Enterprise assigned,
- then force a fresh sign-in.
References: