Forum Discussion
Upcoming change:Updating default sharing setting for Office 365 Group connected SPO site collections
My question is really about the differences between needing to have someone in the organization directory, and authenticated external users. Currently, we set our external sharing site collections to authenticated external users indicating they either work for our company and have their email address, or they are an extenal user who needs to set up a Microsoft Account if they do not already have one that they are using with the email address. We have found that recently, external users are having issues accepting invites to external sharing site collections if they are not already in our directory--not sure how they got into our directory in the first place since we did not add them.
1. Was that automatic when they signed up for the free Microsoft Live account and accepted the invite?
2. If you set the option for users in the Organization Directory, who adds them? The tenant admin?
3. Why would external users not be able to accept invitations to site collections if they sign up for the free account--but are no listed in our Organizational Directory?
- StephenRiceJun 23, 2017
Microsoft
Prior to the change Tejas mentioned, Group connected team sites were set to only allow sharing with external users who were already in the directory. This might explain why sharing was failing. You will need to have the correct external sharing at both the tenant level and at the site collection level (which can only be set using PowerShell as described above).
Hope that helps!
Stephen Rice
OneDrive Program Manager II
- Salvatore BiscariJun 23, 2017Silver Contributor
Your questions have been answered in many other threads.
For example, give a look to this thread: https://techcommunity.microsoft.com/t5/SharePoint/External-Sharing/td-p/23667. Read carefully the answers by StephenRice.
Hope it helps...
- Tina A GaravagliaJun 23, 2017Brass Contributor
Salvatore Biscari Thanks for the reply! I guess this is a little light reading for a rainy day. I'll have to review the articles with our O365 Tenant Admins.
- darrellaasJun 22, 2017MVP
Hi Tina A Garavaglia. I have seen issues too with external guests accepting invites to a shared document.
1. Was that automatic when they signed up for the free Microsoft Live account and accepted the invite?
Yes. When someone accepts an invite using either a Microsoft or Office 365 account, a guest account is created in Azure AD. You should recognize the format when you see it.
[EmailName]_[domain]_com@[tenantname].onmicrosoft.com.
2. If you set the option for users in the Organization Directory, who adds them? The tenant admin?
The invite process adds them. When they accept the invite, the account is created by Azure AD. At least that's what should happen.
3. Why would external users not be able to accept invitations to site collections if they sign up for the free account--but are no listed in our Organizational Directory?
Sounds like this process is not working correctly at the moment. Just to confirm, which setting are you using in your site collection?
1, 2 or 3 in the picture below?
- Tina A GaravagliaJun 23, 2017Brass Contributor
We are using option #2 because we want them to sign in and be "authenticated" versus anonymous. It used to work great. Now something is different, and we cannot get some people in (I understand there is a problem with GMail accounts, but these are not GMail). Thank you for taking the time to reply. Very much appreciated.