Saturday, 7 February 2026

To use password hash synchronization in your environment, you need to:

A Microsoft Entra documentation page was updated: Tokens Overview.

Use tenant restrictions to control the types of external accounts that users can use on your networks and the devices that you manage.

Complete guide to understanding, implementing, and securing tokens in Microsoft identity platform including access tokens, ID tokens, refresh tokens, claims, validation, and configuration.

author: MicrosoftGuyJFlo

Learn how to migrate users from another identity provider to Microsoft Entra External ID.

author: kengaderdus

Learn how to add and manage admin accounts in your external tenant with Microsoft Entra External ID.

Learn how to add and manage customer accounts in Microsoft Entra External ID.

author: kengaderdus

author: kengaderdus

author: kengaderdus

B2B collaboration allows information workers and app owners to add guest users to Microsoft Entra ID for access.

author: kengaderdus

Learn how to add custom attributes to self-service sign-up flows in Microsoft Entra External ID. Extend the set of attributes stored on a guest account and customize the user experience.

Federate with Facebook to enable external users (guests) to sign in to your Microsoft Entra apps with their own Facebook accounts.

Learn how to add Google as an identity provider for your external tenant.

author: kengaderdus

author: kengaderdus

author: kengaderdus

author: kengaderdus

author: henrymbuguakiarie

author: kengaderdus

author: kengaderdus

author: kengaderdus

author: kengaderdus

author: henrymbuguakiarie

author: kengaderdus

author: kengaderdus

author: Dickson-Mwendia

author: SHERMANOUKO

author: SHERMANOUKO

author: kengaderdus

author: kengaderdus

author: SHERMANOUKO

Shows how an admin can add sponsors to guest users in Microsoft Entra B2B collaboration.

Learn how an administrator creates a list to allow or block B2B collaboration with specific domains by using the Microsoft Entra admin center.

**Applies to**:  External tenants ([learn more](/entra/external-id/tenant-configurations))

**Applies to**:  iOS (Swift)  macOS (Swift)

**Applies to**:  Workforce tenants ([learn more](/entra/external-id/tenant-configurations))

author: kengaderdus

Give partners access to both on-premises and cloud resources with Microsoft Entra B2B collaboration.

Learn how to configure B2B direct connect with other Microsoft Entra organizations, using cross-tenant access settings to manage outbound and inbound access.

Learn how to bulk invite B2B collaboration users in Microsoft Entra External ID. Follow the steps to prepare a CSV file, upload it, and verify guest users in the directory.

Learn how to configure external collaboration settings in Microsoft Entra External ID. Control guest user access, specify who can invite guests, and manage domain restrictions for B2B collaboration.

Enable secure cross-cloud B2B collaboration between organizations in different sovereign (national) Microsoft Azure clouds by configuring Microsoft cloud settings.

author: kengaderdus

Learn how to create and manage dynamic membership groups in Microsoft Entra External ID. Set rules based on user attributes to automate group membership for B2B collaboration.

author: kengaderdus

author: kengaderdus

Learn about the pricing structure for Microsoft Entra External ID. Understand the monthly active users (MAU) billing model, core offering, and premium add-ons. Link your tenant to an Azure subscription for proper billing and feature access.

author: SHERMANOUKO

Find answers to frequently asked questions about Microsoft Entra External ID. Learn about pricing, features, and the future of Azure AD B2C and External Identities.

Learn how to add Google as an identity provider in Microsoft Entra External ID. Enable customers to sign in with their Google accounts and configure Google federation for seamless access.

Shows how to give cloud B2B users access to on premises apps with Microsoft Entra B2B collaboration.

Learn how to use Microsoft Entra ID as your default identity provider for sharing with external users.

Learn about customizing the language experience in your user flows in Microsoft Entra External ID.

As a B2B collaboration user, learn how to leave an organization if you no longer need guest user access to apps. If you're an admin, see how to allow external users to leave.

Current limitations for Microsoft Entra B2B collaboration

Use this quickstart to learn how Microsoft Entra admins can add B2B guest users in the Microsoft Entra admin center and walk through the B2B invitation workflow.

author: kengaderdus

author: kengaderdus

author: kengaderdus

author: cilwerner

Learn how to customize the onboarding workflow for Microsoft Entra B2B users to fit your organization’s needs.

Learn about the service limits and restrictions in an external tenant.

Learn how to run a sample Angular SPA to sign in users

Learn how to run a sample React SPA to sign in users

Learn how to run a sample JavaScript SPA to sign in users

author: kengaderdus

Learn about tenant configurations in Microsoft Entra External ID. Understand the differences between workforce and external tenants, and how to configure them for your organization's needs.

In this tutorial, you learn how to use PowerShell and a CSV file to send bulk invitations to external Microsoft Entra B2B collaboration guest users.

author: kengaderdus

author: kengaderdus

author: kengaderdus

author: henrymbuguakiarie

author: henrymbuguakiarie

author: henrymbuguakiarie

author: henrymbuguakiarie

author: henrymbuguakiarie

author: kengaderdus

Enable your external business partners and guest users to use their Microsoft Account (MSA) to sign in to your apps for B2B collaboration.

Enable your external business partners and guest users to use their Microsoft Entra work or school accounts to sign in to your apps for B2B collaboration.

Learn about the default permissions for users in an external tenant.

Learn how to run a sample ASP.NET web app to sign in users

Learn how to run a sample Node.js/Express web app to sign in users

Learn how to run a sample Python Django web app to sign in users

Learn how to run a sample Python Flask web app to sign in users

New and updated documentation for the Microsoft Entra External ID.

To protect customers, some regions require you to enable the country codes to receive SMS telephony verification for Microsoft Entra External ID external tenants.

Learn how to add multifactor authentication (MFA) to your consumer and business customer (CIAM) application. For example, add email one-time passcode as a second authentication factor to your CIAM sign-up and sign-in user flows.

Learn how to enforce multifactor authentication policies for Microsoft Entra B2B users.

Learn about the properties of a B2B guest user in Microsoft Entra External ID. Understand user types, authentication methods, and how to manage guest user access and permissions.

author: henrymbugua

author: henrymbugua

Learn about how to customize the browser language for your app's authentication experience to provide a personalized sign-in.

Learn how to enable and use email one-time passcode authentication for B2B guest users in Microsoft Entra External ID. This feature provides a seamless fallback authentication method for sign-in.

author: kengaderdus

Learn how to set up custom URL domains to personalize the authentication sign-in endpoints for the external customers and consumers of your app.

Explore Microsoft Entra External ID training, live demos, and videos. Learn to create secure sign-up experiences and protect access with multifactor authentication.

In this tutorial, learn how to require multifactor authentication when you use Microsoft Entra B2B to collaborate with external users and partner organizations.

Learn about the B2B collaboration invitation email you can send to business partners and external guest users who need to authenticate and access your apps.

Learn how to add an application to a user flow to associate the application with a sign-up and sign-in user experience. Get guidance for updating the application configuration with application registration and tenant information.

Learn how to configure an Azure AD B2C tenant as an external identity provider in Microsoft Entra External ID, enabling users to sign in using their existing accounts.

Learn how to add Facebook as an identity provider for your external tenant, enabling customers to sign in to your applications using their Facebook accounts.

Add sign-up and sign-in user flows for your consumer and business customers. Create a branded, customized user experience for apps in your external tenant.

author: kengaderdus

Learn how Microsoft Entra B2B invitation redemption works, including guest sign-in, consent process, and privacy terms. Ensure secure access for your organization’s resources.

Learn how to create and define new custom attributes to be collected from users during sign-up and sign-in.

In this quickstart, learn how to create an external tenant for customer identity and access management (CIAM). Customize a sign-in experience and try it out with a sample app.

author: kengaderdus

If you have internal user accounts for partners, distributors, suppliers, vendors, and other guests, you can change to Microsoft Entra B2B collaboration by inviting them to sign in with their own external credentials or sign-in. Use either PowerShell or the Microsoft Graph invitation API.

In this quickstart, you learn how to use PowerShell to send an invitation to a Microsoft Entra B2B collaboration user. You'll use the Microsoft Graph Identity Sign-ins and the Microsoft Graph Users PowerShell modules.

Learn how to Sign in with alias/username with External ID for customer identity and access management (CIAM). Get detailed steps to enable username as a sign-in identifier and create users with both email address and username.

Learn how to use the Run user flow feature to test your sign-up and sign-in user flow for your consumer and business customer apps.

Learn how to use the Microsoft Entra External ID extension for Visual Studio Code. Use the application samples provided to set up a customized, branded sign-in experience for external users of your application without leaving the development environment.

Learn about tenant-level restrictions and controls for users, groups, and applications, along with policy management in a cloud-based portal.

Learn how to add enterprise applications to your Microsoft Entra external tenant using the admin center. Discover gallery apps, configuration steps, and deployment tips.

Configure a web API to be used in a user flow.

author: kengaderdus

author: kengaderdus

Learn how to add built-in user attributes and custom attributes as claims to the application token. Use directory extension attributes for sending user data to applications in token claims.

Add API connectors for custom approval workflows in External ID self-service sign-up

author: kengaderdus

Learn about how to analyze user activity and engagement for your registered application in the external tenant.

Code samples for API connectors in self-service sign-up flows for Microsoft Entra External ID.

Learn how to manage your external tenant by calling the Azure REST API.

Code and PowerShell samples for Microsoft Entra B2B collaboration

Learn how to configure Microsoft Entra External ID with Azure Web Application Firewall.

author: kengaderdus

author: kengaderdus

author: kengaderdus

author: kengaderdus

author: kengaderdus

Find out which core Microsoft Entra features related to the user and group management model and application assignment are available in external tenants.

author: kengaderdus

author: kengaderdus

Learn how to build and integrate apps with external tenants with scenarios such as sign-up, sign in, and getting an access token to call an API.

Secure your custom RESTful APIs used as API connectors in self-service sign-up user flows.

Learn how to define application roles for your consumer and business customer applications and assign those roles to users and groups in external tenants.

Learn about security features and fundamentals for Microsoft Entra External ID customer identity and access management (CIAM) in external tenant configurations.

Microsoft Entra ID supports two tenant configurations: A workforce configuration that's intended for internal use and manages employees and business guests, and a [customer configuration](/entra/external-id/customers/concept-supported-features-customers) which is optimized for isolating consumers and partners in a restricted external-facing directory. While the underlying identity service is identical for both tenant configurations, the sign in domains and token issuing authority for external tenants is different. This allows applications to keep workforce and external ID workflows separated if needed.

Learn how to use custom authentication extensions in Microsoft Entra External ID. Integrate with external systems, add custom logic to authentication flows, and enhance user experiences.

Learn about setting up custom URL domains to personalize the authentication sign-in endpoints for the external customers and consumers of your app.

Learn about B2B collaboration for sharing apps with external identities, business partners, and guests, using External ID for authentication and identity access management.

> This information relates to a prerelease product that might be substantially modified before its release. Microsoft makes no warranties, expressed or implied, with respect to the information provided here.

Use Microsoft Entra API connectors to customize and extend your self-service sign-up user flows by using web APIs.

Microsoft Entra B2B direct connect lets users from other Microsoft Entra tenants seamlessly sign in to your shared resources via Teams shared channels. There's no need for a guest user object in your Microsoft Entra directory.

Learn how to manage cross-tenant access in Microsoft Entra External ID. Configure B2B collaboration and direct connect settings to control access and trust for external organizations.

Compare features and capabilities of a workforce vs. an external tenant configuration. Determine which tenant type applies to your external identities scenario.

Learn how Microsoft Entra External ID provides to manage your external identities scenarios, including guest user access and customer identity and access management (CIAM) for apps.

Learn about the features you set up with the get started guide.

Learn about using MFA to secure apps in your external tenant and enabling email one-time passcodes (EOTP) or SMS as a second verification method for sign-up and sign-in.

Learn best practices and recommendations for business-to-business (B2B) guest user access in Microsoft Entra ID.

Microsoft Entra External ID allows you to collaborate with or publish apps to people outside your organization. Compare solutions for External ID, including Microsoft Entra B2B collaboration, Microsoft Entra B2B collaboration, and Azure AD B2C.

Discover the steps for setting up a customer identity and access management (CIAM) solution in an external tenant, including creating a tenant, registering apps, and setting up user flows for sign-in.

Learn how to enable self-service sign-up for Microsoft Entra External ID. Allow external users to sign up for your applications themselves, customize the sign-up experience, and manage user flows.

User profile attributes that you can collect from the user during sign-up, and how to extend user profile attributes by using custom user attributes.

**Password complexity mismatch in Native Auth**: During a Native Auth flow, if a user enters a password that is correct according to the legacy identity provider but is considered weak by External ID password complexity standards an error is returned instead of redirecting to SSPR.

We are pleased to announce the general availability of client credentials in Entra External ID. The OAuth 2.0 client credentials grant flow permits a web service (confidential client) to use its own credentials, instead of impersonating a user, to authenticate when calling another web service. Permissions are granted directly to the application itself by an administrator.

Learn about federation with an external organization's SAML/WS-Fed identity provider (IdP) for external user self-service sign-up and invitation redemption.

Set up direct federation with SAML 2.0 or WS-Fed identity providers so users can sign in with work accounts. Understand attributes and claims for federation.

Learn how to set up OpenID Connect as an external identity provider in Microsoft Entra External ID, enabling users to sign in using their existing accounts.

Customize the user claims that are issued in the SAML token for Microsoft Entra B2B users.

Learn sign-in and MFA options for customer identity and access management (CIAM), including email, one-time passcodes, social providers, SAML/WS-Fed, and OIDC.

Learn how to create and register a SAML app with External ID for customer identity and access management (CIAM). Choose your app type and get detailed steps.

Set up direct federation with SAML 2.0 or WS-Fed identity providers (IdP) and enable self-service sign-up for external users, who can sign in with their own work accounts.

Learn how to set up SAML/WS-Fed IdP federation with AD FS for B2B collaboration in Microsoft Entra External ID. Configure AD FS as a SAML 2.0 or WS-Fed IdP and manage attributes and claims.

Learn how to configure the standard OpenID Connect claims with the claims your identity provider provides in your external tenant.

author: henrymbuguakiarie

Learn how to configure Akamai Web Application Firewall (WAF) to protect against attacks for Microsoft Entra External ID tenants.

Learn how to configure Cloudflare Web Application Firewall (WAF) to protect against attacks.

Learn how to configure Arkose Labs and Human fraud protection with Microsoft Entra External ID to block bot attacks and fake account creation during user sign-up flows.

Give locally managed external partners access to both local and cloud resources using the same credentials with Microsoft Entra B2B collaboration.

Learn how to Migrate to version 2 of the CrossTenantAccessPolicy Microsoft Graph API.

Disable sign-up in your user flow with Microsoft Graph API. Prevent new registrations and allow only sign-in for your external users.

Learn how to use Visual Studio Connected Services to integrate Microsoft Entra ID into your applications right from your development environment.

Learn how to reset the redemption status for a guest user in Microsoft Entra External ID. This guide covers using the admin center, PowerShell, and Microsoft Graph API.

Guest user properties are configurable in Microsoft Entra B2B collaboration

Learn how to set up Azure Monitor in external tenants to collect and analyze data in your tenant.

Learn about known issues in external tenants.

Learn how to troubleshoot common issues with Microsoft Entra B2B collaboration. Resolve guest sign-in errors, direct connect access problems, policy update failures, and encrypted email access issues.

Learn about how to create branding themes and apply them to the sign-in experience for your application in Microsoft External ID for external tenants.