B2B with clients

Iron Contributor

We are investigating how to take B2B into use with our clients. Many of our clients are smaller companies who don't have AAD in use or even IT-know-how what it is. Now if we invite some client users as Guests to the MS Teams for example, then viral un-managed AAD would be spinned off (if they don't have AAD). 

 

I would like to know has anyoney communicated this with your client org's and their IT departments and what is the general response if you go to them saying "we will invite your users to our system and it will generate un-managed user directory to MS cloud with your domain name. You can then take over it if you want but it will on you"?

 

Is there any way to check if the user still works (user ID enabled) with our client if the AAD stays un-managed?

4 Replies
Does anyone have experience of real life scenarios of using Azure B2B with real clients/partners? And especially with smaller/medium size companies who don't have MS infrastructure in use (Office 365, AAD) and how these clients have welcomed the unmanaged Azure AD which is created for them. What if the customer does not have any capable IT personnel to take-over the unmanaged Azure directory (this is the case with many smaller comapnies)?

Hi,

 

In current release of Azure AD B2B, concept of "unmanaged tenant" you saw previously, doesn't exist anymore.

See e.g. https://docs.microsoft.com/en-us/azure/active-directory/active-directory-b2b-user-properties

 

 

Instead of "unmanaged tenant" they use wording "viral" and "Just-in-time" - but the concept has not changed. If the user's org does not have AAD, Microsoft will spin-up AAD for them and will leave it unmanaged until the org takes it over.
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-self-service-signup

You're correct.

 

I tested this again, and when user has no Microsoft account or Azure AD account, clicking "getting started" on invite e-mail redirects you to "sign up with Microsoft" page, and let's you create a new account. I assumed it meant "Microsoft account", but no it doesnt. Microsoft should be more clear about this. Also on documentation side, as they was when they initially released Azure AD B2B preview maybe two years ago. Now when you look under "integrate parners using Azure AD B2B" topic on MS documentation, you don't find much information about this scenario if none.

 

Sorry I can't answer your original question. I'm also interested to hear how this is communicated to clients.