Managing external identities to enable secure access for partners, customers, and other non-employees
Microsoft Entra External ID customer tenant - Conditional Access step-up MFA, licensing and Security Defaults
Hello Microsoft Support, We're developing FleetTrack, a UK-based SaaS application using Microsoft Entra External ID for customer authentication. Our configuration is: Microsoft Entra External ID customer tenant. Entra External ID Core offer, linked to…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Entra External ID: Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help
We recently deployed Entra External ID and i need to bulk invite about 1250 accounts trought he graph api. The first 100 went fine, but then this error message "Invitations are blocked for this directory due to suspicious activity. Please contact…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
B2B guest invitations blocked due to suspicious activity after Bulk Invite
Hello Microsoft Support, We performed a legitimate bulk invitation of B2B guest users in Microsoft Entra ID for testing a Power Platform / Dynamics 365 solution. Immediately after the bulk invitation, both bulk and manual guest invitations started…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
AI answer
User invitation failed: Insufficient privileges to complete the operation
"User invitation failed: Insufficient privileges to complete the operation despite being a Global Administrator with wide-open External Collaboration and Cross-Tenant settings." Current Diagnostics: Account Role: Global Administrator / User…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
AI answer
Facebook test users blocked from signing up to Entra External ID
We use an Entra External ID customer tenant with Facebook enabled in a sign-up/sign-in user flow. Microsoft Entra External ID appears to blocks new users signing up through Facebook with an @tfbnw.net test email, which prevents Meta from reviewing our…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
AI answer
External users
how to add external users as trustable contacts. regularly facing issue while sharing some important snips or document there is no option.
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Global Admin cannot invite B2B guests – "Insufficient privileges to complete the operation" (tenant-level block)
Previous case 2610300040001991 was closed by the Microsoft 365 team and redirected to Entra, but the Entra portal does not allow technical cases without a paid Azure plan. Please handle this under our Microsoft 365 Business Standard subscription. As…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Entra External Id: the Graph revokeSignInSession endpoint doesn't invalidate refresh tokens for users on social sso identity provider
I have an Entra External Id tenant which I use as my IdP. It has local accounts + Google enabled as a social SSO provider. I'm seeing weird behavior for google sign-ins where when I revoke a user's sessions on the graph api, I get a 200 back, but the…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
AI answer
Entra External ID tenant creation blocked by ARM EU data boundary: Europe rejected, North Europe unsupported
I’m trying to create a Microsoft Entra External ID external tenant for customer authentication, hosted in Europe and billed through our existing Azure subscription. Creation fails because the External ID resource’s geographic location appears…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Entra External ID SSO issue: AADSTS700056 on repeat sign-in when ESTSAUTHPERSISTENT cookie exists
Hello Support Team, We are seeing a repeatable sign-in issue in our Entra External ID / MSAL browser flow. Problem summary A user can sign in successfully on the first attempt. After logout, the same user may fail on the next sign-in attempt…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Error when inviting external users in MS Azure "User invitation Failed"
Hello, When i try to invite external users in MS Azure I get an error: "User invitation Failed" "Insufficient privileges to complete the operation" I am a Global Administrator I added the external organization in Cross-tenant access…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Entra External ID: Sign in with Apple does not pre-fill first and last name, but Google and Facebook do
In an external tenant, we use the built-in Apple, Google and Facebook identity providers in one sign-up and sign-in user flow. The flow collects Given Name and Surname. Google and Facebook sign-ups pre-fill Given Name and Surname on the sign-up page.…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Azure AD B2C – Verification Emails Not Being Received
We are experiencing an issue with email-based MFA in Azure AD B2C. We're seeing some, users attempting to sign in to our application have stopped receiving their verification codes. While others are able to receive their code. The audit logs indicate…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Azure AD B2C Emails not being delivered
Since this morning customers signing on with our service do not receive the email with the verification code anymore. The audit logs show successful sending of the email. We were able to verify the issue and tried with different email addresses at…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
MFA emails ADb2c not working
Azure ADb2C not sending MFA emails since around 2PM. Was working this morning.
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
AI answer
Entra External Id, How to add custom claims from custom IDP in the output token
Hello, I try to migrate from B2C to external ID, and i need to add a custom claims from the external idp (OIDC), so i followed this doc : https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-add-attributes-to-token and this…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Device code sign-in in Entra External ID: sign-in logs show only “Previously satisfied”, no password/Email OTP steps
Environment. A Microsoft Entra External ID tenant (external configuration). The user is a local account: sign-in type emailAddress, issuer <tenant>.onmicrosoft.com. The user signs in through a public client application using the OAuth 2.0 device…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
AI answer
Entra External ID (CIAM) – Configure Password History to Prevent Reuse of Last 4 Passwords
We have a requirement to configure the Change Password policy in Microsoft Entra External ID (CIAM) so that users cannot reuse their last four passwords. Based on our review, we could not find a native configuration to set password history = 4 for…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Microsoft Entra External ID custom URL domain: esctx cookies accumulate and cause HTTP 431 on a subdomain
We use a custom URL domain for our Entra External ID tenant (login.contoso.com, through Azure Front Door). Our own web page for creating passkeys runs on a subdomain, account.login.contoso.com, because WebAuthn requires it to be within the passkey's…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees
Entra External ID: Federated email claim not present in OnAttributeCollectionStart/Submit payload
We are using a federated OIDC identity provider with Microsoft Entra External ID. The email claim is successful: returned from the IdP mapped via OIDC claim mapping (email -> email) correctly prefilled in the UI during sign-up However, email is…
Microsoft Security | Microsoft Entra | Microsoft Entra External ID
Managing external identities to enable secure access for partners, customers, and other non-employees