Guest switch menu not showing

[Steve Frank]

I am testing Teams guest feature. I successfully added an external user, who is my own account in another tenant. Guest shows as:  Azure AD type Guest, Invitation accepted Yes, Source External Azure AD. The guest account was able to login to the remote tenant and then see the standard switch menu to switch to guest access in my target tenant. Everything OK.

A few days later, when the guest account logs in, the switch menu does not show. True for desktop, several browsers, and iOS app.

From my tenant that host the Teams site and has the remote user as a guest, I sent a chat message to the guest. Opening the link in the email received by the guest triggered the switch menu to appear in the guest instance window of Teams. So everything still works fine, except that the switch menu does not appear without the trigger of the link from the chat notification email.

I filed a support ticket. So far, the best offer is to send an email to the teams support group, which I did. But I thought it might be worth checking here.

Two possible issues (just guessing):

1. In my tenant, the target site for the Teams site, I changed the Azure AD name for the guest, because the name of the guest is my name, and so both me and guest had the same name. After changing the guest name in my Azure AD, that change propagated after about one day, and everything still worked OK, with the guest name now showing the change. I don't think that should be a problem, but it is a change in the Azure AD guest entry on my site.

2. The email for the remote tenant that hosts the guest is added as xxx@xxx.edu. In the remote Azure directory, the primary email address for the user is xxx@ad.xxx.edu, with an alias to xxx@xxx.edu. The second canonical address is the one that is used publicly and that shows in the site's address book, but underneath, the ad.xxx.edu address is the primary address. Given that everything worked fine for a few days with xxx@xxx.edu as the guest user name, I don't see why this would be a problem, but it is a difference that might trigger a bug somewhere.

Any advice?

[#2]

Hi Steve,

Thanks for raising. Have you considered or tried removing the guest from your AD and then re-inviting them? Would be interested to see if this resolves it.

Best, Chris

[#3]

Does the guests azuread profile show the other organisation?

Visit https://account.activedirectory.windowsazure.com/r#/profile/organizations#organizations-section

[#4]

Hi Chris--Thanks, that's a good idea and might work. In this case, I think I will wait a few days first. This is a test to determine if I will use Teams for about 25 guests. I would like to know if that would run into problems, so it would be helpful to know what is wrong and if anything can be done to limit recurrence.  Steve

[#5]

Yes, it does. That's helpful, thanks.

[#6]

Just make sure the the user accepts the invitation with the correct account! Easiest if something goes wrong is remove it from AAD and redo the invitation process!

Adam

[#7]

Thanks, Adam. The AAD entry for the guest in my tenant shows the correct account email address as xxx@xxx.edu. That matches the email shown when I followed the link for azure read (see above) when the guest is logged into his own home tenant. There is the underlying issue that in the guest's home tenant, the primary sign in address is xxx@ad.xxx.edu, but that is not the public email for the user. Also, following Steven Collier's advice, the user shows my tenant as listed in his profile, and the guest user can access my tenant when triggered as described in my initial post. I am delaying deletion and re-adding because I am trying to figure out if there is something here that might recur and cause problems when I invite many guests.

[#8]

Thanks Steve! Not a problem! Few days to see if there is an underlying cause.

Has the guest user fully logged out of Teams, close all apps, log back in? Does the ability to switch return? Also

> Can the guest user switch in the mobile or web app?
> Is the desktop client fully up to date?

Best, Chris

[#9]

Thanks, Chris.

>Has the guest user fully logged out of Teams, close all apps, log back in?

Yes

>Does the ability to switch return? 

No

> Can the guest user switch in the mobile or web app?

No
> Is the desktop client fully up to date?

Yes

[#10]

Sorry if the answer is already told, but is the user logged into Teams with the same username as in the guest account in your AAD?

[#11]

I would echo Adam’s comment. Is the username to login to Teams for the guest the same username in your Azure AD?

[#12]

Chris & Adam: Yes, the Azure AD username (email) address and display name in my tenant AAD database matches the email and display name shown in my Teams site.

I forgot to mention that the issue I am seeing is similar to a bug that was reported about a year ago and supposedly fixed by MS. However, in my case, the bug arises in the opposite direction. In the prior report, the user lost the switch menu when in the guest site, but could see the menu when in his home tenant. I have the opposite pattern: no switch menu in the home tenant, but it appears when in the guest tenant.

[#13]

If you can recreate this with other users I would report this to Microsoft! Because then its with different clients and more than one user so it seems more like a bug or services issue!

Adam

[#14]

@Christopher Hoard 

We had the same issue on the desktop version and a log a full log out on the Teams client, back in resolved the issue.