Forum Discussion
B2B SPO: GCCH tenant members as guests on commercial Entra
Has anyone successfully enabled GCC guest access to a Commercial SharePoint Online site?
We support customers on GCCH tenants and are migrating an on‑prem SharePoint workload to Commercial M365 SPO. Inviting GCC users as guests fails with token/Token ID errors. Entra sign‑in succeeds, but SharePoint token issuance fails. CTAP is configured on both GCC (outbound) and Commercial (inbound).
Microsoft support indicated it may not be possible (“Entra won’t pass OIDC to SPO”), but Microsoft documentation suggests B2B for SharePoint works across US Gov and Commercial.
If you’ve made this work (or confirmed it can’t), I’d appreciate any practical guidance or gotchas. Thanks!
1 Reply
Yes, you can definitely do this. We do this. GCC High is our primary tenant and we have a Commercial tenant to work with our parent company and some partners on proposals. We just make sure we do not share any CUI which is done through DLP. One of the things we have had to do is invite our GCC High users as guests to the commercial tenant. We have set it to automatically accept the invitations. We have not attempted to do any provisioning of syncing of the users between the two tenants as we only have a small group of users who are supposed to use the commercial tenant. This also helps a ton with licensing because they can open office files in their office client without having to have a license for a different account. The process is 100x smoother than have a commercial account and a GCC High account and switching back and forth. The biggest problem I have is users in GCCH wanting features that are not available yet, but they saw them on the commercial side and want to know when they are going to get it.
