Enable Authentications for apps for external users

%3CLINGO-SUB%20id%3D%22lingo-sub-2443036%22%20slang%3D%22en-US%22%3EEnable%20Authentications%20for%20apps%20for%20external%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2443036%22%20slang%3D%22en-US%22%3E%3CP%3EHello%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20enabled%20SSO%20for%20an%20application%20using%20SAML%20confg.%20Also%20enabled%20MFA%20for%20the%20users%20i%3Dwithin%20the%20organization.%20However%2C%20I%20would%20also%20like%20to%20set-up%20MFA%20for%20the%20external%20users%20who%20are%20in%20AD%20as%20%22mail%20user%22%20to%20access%20the%20apps.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECould%20anyone%20please%20guide%20on%20these%20steps%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20your%20time.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2443695%22%20slang%3D%22en-US%22%3ERe%3A%20Enable%20Authentications%20for%20apps%20for%20external%20users%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2443695%22%20slang%3D%22en-US%22%3EHmm%2C%20I%20am%20not%20sure%20if%20it%20is%20supported%2C%20as%20they%20are%20more%20like%20contacts%20than%20actual%20users.%3CBR%20%2F%3E%3CBR%20%2F%3ECan%20you%20force%20MFA%20on%20them%20from%20the%20M365%20Admin%20centre%3F%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Faccount.cloud.ppi.net%2Fknowledgebase%2F10%2FSet-up-multi-factor-authentication-for-Office-365-users.html%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faccount.cloud.ppi.net%2Fknowledgebase%2F10%2FSet-up-multi-factor-authentication-for-Office-365-users.html%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EOther%20than%20that%20the%20only%20thing%20that%20is%20coming%20to%20mind%20is%20to%20either%20give%20them%20a%20proper%20active%20directory%20account%20or%20invite%20them%20as%20external%2Fguest%20users%20and%20configure%20MFA%20that%20way%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fexternal-identities%2Fb2b-tutorial-require-mfa%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fexternal-identities%2Fb2b-tutorial-require-mfa%3C%2FA%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hello,

 

I have enabled SSO for an application using SAML confg. Also enabled MFA for the users i=within the organization. However, I would also like to set-up MFA for the external users who are in AD as "mail user" to access the apps.

 

Could anyone please guide on these steps?

 

Thank you for your time.

1 Reply
Hmm, I am not sure if it is supported, as they are more like contacts than actual users.

Can you force MFA on them from the M365 Admin centre?

https://account.cloud.ppi.net/knowledgebase/10/Set-up-multi-factor-authentication-for-Office-365-use...

Other than that the only thing that is coming to mind is to either give them a proper active directory account or invite them as external/guest users and configure MFA that way:
https://docs.microsoft.com/en-us/azure/active-directory/external-identities/b2b-tutorial-require-mfa