MS Teams Invitation redemption & Self service account sign up is disabled

[Unnie]

Hi there,

I am invited to join a MS Teams group from another organization. when I try to redeem the invitation , it asks me create a password  and display name rather than allowing me to Sign in using my Microsoft Account (Since my organisation does not have a Azure AD yet).

But when I try to go through by creating a password, then I get an error that:

"We cannot create a self-service Azure AD account for you because has <orga name> disabled self-service account sign-up by email validation. Ask admin to enable EmailVerified users or create an account for you."

 My organisation does not have any Azure AD and I have a Microsoft Account created using my official email id.

What is going on here? Any help is much appreciated 🙂

[#2]

Hi Unnie,

Please check with the company inviting you to collaborate, this error occurs when external collaboration has been restricted.

Settings to query:

1. Members can invite
2. Guests can invite
3. Collaboration restrictions

 

[#3]

@ThinkSync Please show exactly where to set this permissions.
I can't find that in Azure under Groups.

[#4]

Hi@Tvermoes exact info:

1. Sign in to https://portal.azure.com

2. Click Azure Active directory in the left pane.

3. Under Manage, click User settings.

4. Under External users, click Manage External collaboration settings.

[#5]

@Tvermoes is this issue resolves after following the below steps

[#6]

@Unnie 

I have exactly this same problem, but my domain is on GSuite! There is no such collaboration setting. 

What to do ? 

[#7]

@ThinkSync 

That is not correct.

They have already received an invite, so their external collaboration settings are fine otherwise they would not have been able to send the invite in the first place.

The issue is because the user of the receiving organisation has not allowed them self service sign up. Probably because they either don't yet have their domain in Azure AD or they do but have not setup that person in Azure AD yet.

The receiving organisation need to action this, either allow self service sign up for their Azure AD domain, create the persons account in their Azure AD or if they have local AD they could sync their local AD with Azure AD to automatically create the accounts in Azure AD.

https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-self-service-si...

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis

[#8]

@a-yates True, but the problem is my org do not have Azure AD , so naturally I must be asked to create a Microsoft account for my email or use my existing Microsoft account attached to that email. But strangely, this does not happen, am suspicious that maybe some IT PRO in our org created a dummy Azure Ad with my org name and probably added it with our org domain.

[#9]

Hi @Unnie, about "some IT PRO in our org created a dummy Azure Ad with my org name and probably added it with our org domain" I assuming that you are referring a public domain, if so, you can check that consulting the DNS records (ie https://dnschecker.org) and if the domain has TXT record like MS=ms########  <- The '#' is just a numbers, the domain has been added as a custom domain to Azure services like Azure AD.

[#10]

@ricardo thanks , I do not see that entry. So the issue is something else 😞