Forum Discussion

vkumar1983's avatar
vkumar1983
Copper Contributor
May 19, 2020

Azure active directory Enterprise Application

Q- I have an Enterprise Application (3rd Party SaaS) registerd and configured with SCIM and enabled for a group of users. I want to provide access to External users (Say Partner users) on SaaS application. Is this doable? Please suggest.

4 Replies

  • Manoj94's avatar
    Manoj94
    Copper Contributor

    vkumar1983 

    You can invite guest users to the directory, to a Group, or to an application.
    When you Invite the Guest in Azure AD the Invitation will be sent to the external user and the external user has to click on the Invite URL, Once he\she clicks on the URL the invited user's account will get created in Azure AD Automatically with a user type as 'Guest'. 

     

    Once this external user is created as a 'Guest user' in the Directory, you can send the guest user a direct link to access a Shared application.

  • Joe Stocker's avatar
    Joe Stocker
    Bronze Contributor
    Yes, take a look at the Azure B2B, as this will allow your external users (partners or customers) to access your SaaS application. https://docs.microsoft.com/en-us/azure/active-directory/b2b/
    • vkumar1983's avatar
      vkumar1983
      Copper Contributor

      Joe Stocker 

      thank you..

      SaaS provider should support this B2B Guest authentication. I am checking with if they allow Guest to login on their Portal.

      • Joe Stocker's avatar
        Joe Stocker
        Bronze Contributor
        It should be no different than one of your internal users, because you control which Claims are sent. So for example, you can pass the userprincipalname as a claim, and as long as your SaaS application has a user account matching that userprincipalname (or email field) then it should logon just the same.