Forum Discussion
Verify email of external participant - Join as invited participant
- Mar 15, 2021Hello, this is the definition of that choice "Authenticated users from within the organization, including guest users, join the meeting directly without waiting in the lobby. Users from trusted organizations and anonymous users wait in the lobby. This is the default setting."
In other words, people not being invited to your org. as a guest, that is federated/trusted and anonymous users will get stuck in the lobby and someone must admit them. Unless they are invited as a true guest user within your org (a guest account is created in your Azure AD) OR you can change the lobby setting for the specific meeting to let in federated/trusted directly, and even anonymous users having the link forwarded or similar, if selecting the option Everyone.
So guest users are in your Azure AD with guest accounts. Federated and Anonymous are not, if not explicitly invited.
Thanks, ChristianBergstrom and Terry Hugill . I appreciate the added detail and willingness to help, but neither are really hitting on my need. Let me take a little more long form approach to describe my situation and the behavior I'm seeing. I used to think that if you invited an external participant all join processes were the same. Yesterday I discovered that was not the case.
I organized a meeting using my business account and invited my personal account to the meeting. I joined the meeting with my business account in the Teams client on my business computer.
I then accessed my personal email from the Google Chrome browser, clicked the join meeting link, and chose to join the meeting in the browser. The meeting opened, asking me to enter my name (see screenshot01.png). I was then placed in the lobby.
Next, I took a little detour. In my business Teams environment, I setup a Microsoft Team that allows external members. After that site was setup, my personal email received an invite to that Team. In an InPrivate Edge browser, I pasted the invite link into the address bar. This walked me through a Sign in process where I entered by personal email address, hit next, "Taking you to your organization's sign-in page", kicked me to "Sign in to continue to microsoftonline.com", entered my personal email address, clicked next, entered my password, clicked next, completed multi-factor authentication for my personal account, and rolled into that Microsoft Team.
Then, I copied the address from the original meeting invite and pasted it into a new tab on the InPrivate Edge browser where I had authenticated to access the Microsoft Team. When I joined the meeting in the browser, this time I was not prompted to enter my name. Microsoft Teams recognized me (presumably) because I had authenticated with the account. I joined right into the meeting, because I was an invited guest (not just a guest) (see screenshot02.png).
The other behavior I am seeing, I think is related to MC226407. In the meeting chat, after leaving the meeting, the first personal account that joined (that was placed in the lobby), was removed from the Chat, with the message "[personal account] no longer has access to the chat." Where as the authenticated account was not removed from the Chat. I believe this is because they are recognized as the account from the original invite.
I'm mostly trying to make sense of this behavior and understand if it can be accomplished without authenticating to a Microsoft Team that is open for external participants. I can see use cases in my company where it would be beneficial for the external participant to seen as an invited guest and not just a guest.
If you read all of this, thank you. 🙂 I appreciate the help.
- Brett WilmsMar 15, 2021Iron Contributor
ChristianBergstromI appreciate you taking the time to try and help :). Who can bypass the lobby? is set to "People in my organization and guests"
- ChristianBergstromMar 15, 2021Silver ContributorHello, this is the definition of that choice "Authenticated users from within the organization, including guest users, join the meeting directly without waiting in the lobby. Users from trusted organizations and anonymous users wait in the lobby. This is the default setting."
In other words, people not being invited to your org. as a guest, that is federated/trusted and anonymous users will get stuck in the lobby and someone must admit them. Unless they are invited as a true guest user within your org (a guest account is created in your Azure AD) OR you can change the lobby setting for the specific meeting to let in federated/trusted directly, and even anonymous users having the link forwarded or similar, if selecting the option Everyone.
So guest users are in your Azure AD with guest accounts. Federated and Anonymous are not, if not explicitly invited.- Brett WilmsMar 18, 2021Iron ContributorThanks for helping me work through this. I think I've got my head around this. In short, there isn't a simple way for Guests to appear as Invited Guests. They would need to be guest accounts in our tenant for this behavior.