Autentication Multi-Tenant in Azure Entra ID (Azure AD)
Good day Requirement Situation Company A needs to allow users from Company B (with their own tenant and Microsoft 365 accounts) to authenticate in Company A's ValidRisk web application using their own organizational credentials. To achieve this, an…
Handle authentication for two different apps and different user sets within single Azure AD B2C tenant
I have a scenario where I have two different web apps. Each with its own users. There is a possibility that user from app1 is also part of app2 as well. I have created one organization level Azure AD B2C tenant. What I am not able to understand are below…


I have Entra federated with Okta. One of my users is getting this error: AADSTS50105: The signed in user is blocked because they are not a direct member of a group with access. My problem is that they are a member of a group with access and assigned app.
Hi, One of my users is getting this error when trying to log in to the other IDP using Entra federation: Message: AADSTS50105: Your administrator has configured the application to block users unless they are specifically granted ('assigned') access to…
Multitenant Collaboration vs Cross tenant access best practices
Hi All, I am looking at option(s) in relation to Multitenant Collaboration vs Cross-tenant access in 365/Entra/Azure portals, I am finding my search for documentation challenging- I have found a non Microsoft page which describes the…
Is it possible to link multiple identity providers to a user profile with Entra External ID?
I am testing Entra External ID and want to know if I can allow a user to link multiple external identities to their profile. This would mean that they could log in using different providers (such as Microsoft, Google, Facebook or Local accounts), but…
Azure B2C: Authentication Methods UI no longer shows MFA phone numbers
It looks like the "old UI experience" was finally deprecated, but the new Authentication Methods UI experience no longer shows an MFA phone number. The example user below has MFA registered via a B2C custom policy (basically straight out of…
I'm not able to remove custom extension from my Microsoft Entra tenant
I tried to configure a AttributeCollectionSubmit (Preview) custom extension. It didn't work for me and I decided to do it in a different way, but creating a new TokenIssuanceStart extension. Now I'm trying to remove this failing extension but it doesn't…
Azure B2C user flow API connectors - configuring user flow to accept properties from API connector
My question is related to the docs page at: https://learn.microsoft.com/en-gb/azure/active-directory-b2c/add-api-connector?pivots=b2c-user-flow#continuation-response-1 I want to clarify the correctness of the following paragraph in the docs page:…
Migrating user credentials from AD B2C to Entra External ID
Is it possible to transfer user data including the hashed passwords from AD B2C to Entra External ID? Is such a migration path possible via self-service or via Azure support? Thanks!
How to create a additional Microsoft 365 login on my pc from a different tenant
I have my own Microsoft E3 tenant, I am currently setting up a G3 tenant for a local agency, in which I will be managing. I log in to my laptop with my Microsoft 365 account now. How can I create a separate login for the G3 tenant on the same pc without…
Restrict native login to specific set of users
We have a scenario, where specific users should be able to login through a native login flow, whilst others should login through browser redirect. Is there a way of doing that?
B2B collaboration user couldn't change password
Hi guys, help me to understand cause of the issue. I have 2 users converted to external B2B collaboration(to let them use external email address as a login). One can login to entra account by https://login.microsoftonline.com/with his invitation external…
Getting error "You can't sign in here with a personal account. Use your work or school account instead."
I have an Entra External Tenant for the users of my application, but I'm getting this error when trying to log into my application: You can't sign in here with a personal account. Use your work or school account instead. The email I'm trying to login in…
Cannot use personal account to log in with MS Entra ID when integrating with Flask.
I am trying to integrate "Sign in with Microsoft" option into my Flask application via Microsoft Entra ID. I have followed strictly all steps described in these two official MS tutorials: …
Custom URL domain doesn't work with tenant ID instead of its name in URL
Hi there, coming from Azure B2C, my company is used to know that `https://login.example.tld/

Need Help Restoring SSO After Switching Domain from Federated to Managed
Hello, I have a domain with GoDaddy, and my users authenticate with Microsoft 365 using GoDaddy’s SSO. Until now, the login process worked as follows: I would enter my username in the Microsoft 365 login page. The browser would redirect me to…
Permissions or roles required for MTO
Hi Team, Need to know what permissions or roles required to enable MTO and then be able to configure all configurations under Cross Tenant access settings (including cross tenant synchronization settings). It is a bit confusing to clearly understand…
403 error when calling graph api with logged user's accessToken
Hi There, I am trying to call MS Graph API using the logged in users access token to fetch group displayName attribute based on the group id which I am getting from the ID Token. I have made sure that logged in user's access token as all the required…
Invitations are blocked for this directory due to suspicious activity
When uploading a csv file with about 3000 users to invite in the Entra Admin UI using the bulk invite functionality I get the error message: Request was unsuccessful. Details: Invitations are blocked for this directory due to suspicious activity. Please…
Auditing Unused Entra External ID information and usage
How can we audit and get detailed information about which Entra External ID and B2C tenants are no longer used? Because the https://portal.azure.com/#browse/Microsoft.AzureActiveDirectory%2Fb2cDirectories it does not show which Resource Group it is…
