Microsoft Teams is a great collaboration tool, and the integration of external parties is already a powerful tool in today's hybrid workplace. Working with guest in Microsoft Teams is based on a feat...
Updated Mar 25, 2022
Version 1.0
Blog Post
8 MIN READ
Teams Connect with your partners - Get to know the Azure AD config needed to be successful
Hi mgrady52 ,
Thanks for your comment. This stuff is fairly complex so it is OK to be confused 😉 My article just focuses on the core enablement. Most of the other stuff will be on by default, but not the most important. Thats why I wrote this article. Please remember the public preview just started. Today my LAB tenant finally got the feature in the Teams Client. So from a core setup it would look like this during public preview:
- In your tenant you need to enable B2B direct connect because it is off by default
- Enable Incoming B2B direct connect to allow other tenants to join a Shared Channel you shared from your tenant
- Enable Outgoing B2B direct connect to allow your users to join a Shared Channel in foreign tenants
- (Public Preview): Allow your users to enable Public Preview in their teams client
- This is done via a Teams Update Policy in the Teams Admin Center
- (Public Preview): A user that is targeted by the update policy to allow Public Preview features, need to switch to public preview in the client the user is running (Teams Desktop, Teams Web Client, ...)
2. and 3. will not be required once the feature goes GA so you only need to configure Cross Tenant Access Policies mentioned in my article. If both tenants are setup this way and didn't change any other default they are good to go. If there are still problems these are thinks that might be not on default setting:
- Teams Policy in Teams Admin Center:
- An admin can turn of Shared Channel creation
- An admin can prevent your users to not share channels with extern users
- Teams Guest Policy in Teams Admin Center
- An admin could have turned off Guest access for the complete tenant
- M365 Guests disabled
- An admin could have turned of guest access on the tenant level in M365 Admin Center
- A Unified Label could be applyed to the Group and disable guest access for this group (or a simple PowerShell config for this group)
This might be not 100% complete like conditional access, etc but it it the most "obvious" list.
I hope you get a great start. With the feature. Check out the docs on Microsoft because they are really great. The team has put a lot of effort into these.
Ciao Marco