Forum Discussion
External sharing and MS accounts
Great question, I'd love to know that myself. Chris McNulty, might you be able to point us in the right direction here?
What the user has done is just mapped an alias to the live account aka adam.levithan@exostar.com to adam.levithan@live.com , but they are not actually using their work e-mail. As jcgonzalezmartin say, you must remove that identity from sharing otherwise they would still have access via the live account.
Adam Levithan is correct, from my experience.
This is one of the big governance issues with non-organizational accounts used by external sharing users. If someone is no longer employed by that external organization (vendor, partner, consulting firm), then they can still access your site unless you specifically remove them. This is a problem because that other company may not notify you that the person is no longer employed.
That said, this isn't necessarily a new problem, just another scenario where you need to closely monitor/manage the lifecycle of a user account.
Haven't used it be there is a PNP solution here https://dev.office.com/patterns-and-practices-detail/1944
Would also imagine there are 3rd party tools, might be worth checking on user voice, you'd like to think this is something MS is already working on !
