Blog Post

Microsoft Entra Blog
4 MIN READ

Cross-tenant access settings for secure collaboration now generally available!

Robin Goldstein's avatar
Robin Goldstein
Former Employee
Jul 21, 2022
Hello friends,    I wanted to share that cross-tenant access settings for external collaboration is now generally available! Iā€™m proud of the work the team has done to bring secure collaboration ...
Updated Jul 18, 2022
Version 1.0
azure active directory
identity and access management
Robin Goldstein's avatar
Former Employee
Joined September 28, 2018
View Profile
Microsoft Entra Blog
Stay informed on how to secure access for employees, customers, and non-human identities, from anywhere, to multicloud and on-premises resources, with comprehensive identity and network access solutions powered by AI.
Joeri_Juramento's avatar
Joeri_Juramento
Copper Contributor
Aug 02, 2022

This will remove friction. šŸ™‚ No more forcing guests to jump through two hoops again. Very nice.

 

Difference in type of MFA

However, I have a question for B2B Collaboration: Imagine this has been set-up in a resource tenant and MFA of an incoming tenant is trusted.

What if this guest user's tenant's MFA is configured to allow MFA via text-messages or phone calls and in the resource tenant this has been disabled, only allowing Security Keys and the Microsoft Authenticator App (or OTP apps)?

Can I enforce the usage of modern (Passwordless) MFA methods in the guest's own tenant when/while the guest is accessing resources in the resource tenant?

 

Like this new feature of Inbound Access Settings \ Trust Settings, the goal is having one MFA challenge in stead of two, but not allowing text-based MFA for Guests suddenly due to security, policy and usability reasons.

 

Penny for your thoughts.