Forum Discussion
JosephNierenberg
Dec 12, 2018Iron Contributor
Best practice to add guest to AAD?
I could give a guest access to SPO directly from the site's permissions settings, and I could give a guest access to Teams directly from the Teams interface (at least in a channel, if not in chat). I...
- Dec 25, 2018Yeah, working on Desktop now, you used to not be able to pick, not sure when it got added, but it's there now :).
Anyway, so bottom line here, you should be able to chose, having a guest is not required. Test with my tenant if you wish, but if it works, and you can't do that with someone you're trying to reach and you don't get the "search externally for" and it doesn't connect, then they must not have their end configured, but inviting them or adding them as a guest to your tenant allows them to tenant switch to chat, which isn't the same as federation.
Anyway, let us know if you have other questions or need help with more testing.
ThinkSync
Dec 12, 2018Brass Contributor
Hi Joseph,
The short answer is no – both ways create “shadow” accounts in your tenant, which the B2B user then needs to redeem before use.
https://docs.microsoft.com/en-us/azure/active-directory/b2b/redemption-experience
Some customers manage and restrict account creation using the B2B portal, or create B2B accounts for their users to then assign to resources.
If you’d like to restrict B2B account creation, please refer to the ‘External collaboration settings’ blade.
Hope this helps.
EarlZirkle
Feb 20, 2019Iron Contributor
Thanks for the tip. Very helpful!