Forum Discussion

mdcastorena's avatar
mdcastorena
Brass Contributor
Jul 29, 2024
Solved

MFA Requirements for external users

Good evening all,

 

Where can I check the default MFA rules for external guests? i.e, --
Can someone please explain to me the default MFA rules for guests accessing SharePoint data shared with them?


Scenario: the guest user was granted access to a specific folder on a SharePoint site via "People I choose" option. SharePoint sends the automated email sent to the recipient. SharePoint sends them this email -

 

 

Upon the first click on the "Open" button in the email, they're prompted to sign in with their Microsoft Account and then authenticate themselves using MFA. This seems normal for the first time accessing. 

 

I am getting complaints that external users are having to use MFA EVERY time they try to access the files, and I am thinking it's due to the internal user not sharing the same way I am doing it. In any case, I would like somewhere to check from an Administrative perspective what exactly to expect when it comes to sharing internal items externally and when/if MFA should come into play. Thank you in advance! 

 

Morghan C.

  • nhtkid's avatar
    nhtkid
    Aug 01, 2024
    Nice one. Good to know.

    Since you mentioned about MFA, another place to check is your CAP that require guests to use MFA. In that particular CAP under the "Session" setting, it configures how often to re-authenticate.

    Your case is more like an idividual thing since it's not affecting the mass.
    • mdcastorena's avatar
      mdcastorena
      Brass Contributor

      Hi nhtkid - see below: 

       

       

      After everything was said and done, it ultimately seems to have been a user error. I am glad I now know where to check this in the future! Thank you. 

      • nhtkid's avatar
        nhtkid
        Iron Contributor
        Nice one. Good to know.

        Since you mentioned about MFA, another place to check is your CAP that require guests to use MFA. In that particular CAP under the "Session" setting, it configures how often to re-authenticate.

        Your case is more like an idividual thing since it's not affecting the mass.

Resources