lock teams to only allow invites from specific organisations

[Deleted]

Hello,

I have been having major issues locking TEAMS down.

I want to be able to only allow specific emails accounts to be able to send team invites into my organization.

Company A gets an invite from Company B (this company is allowed). The user is then allowed to accept the invite.

Company A gets an invite from Company C (this company isn’t allowed). The user bets blocked from accepting the invite.

I am sorry if this isn’t clear enough but it’s the only way I can explain it.

Thanks for your help in advance

[#2]

Hi @Deleted

AFAIK, this isn't available today. However, there are several uservoices for the introduction of controls to permit users to join other tenants as guests.

https://microsoftteams.uservoice.com/forums/555103-public/suggestions/34137604-security-controls-on-teams-invitaion-from-externa

https://microsoftteams.uservoice.com/forums/555103-public/suggestions/37478266-restrict-users-to-be-invited-to-external-tenants-a

https://microsoftteams.uservoice.com/forums/555103-public/suggestions/36352375-prevent-users-from-joining-external-tenants-as-gue

Would recommend you vote on them to push them up the agenda. The only thing I would add is this is that since users can use Microsoft Accounts, GMail accounts etc to join other organisations as guests then this may not ultimately resolve what you are looking to do, however it would definitely be a step in the right direction.

There is also another post which discusses a possible workaround within the corporate network, however this has a lot of caveats.

https://techcommunity.microsoft.com/t5/Azure-Active-Directory-B2B/Block-users-from-becoming-Guest-in-another-Office-365-Tenant/td-p/196649

Hope that answers your question.

Best, Chris

[#3]

@Deleted As mentioned above there is no way to lock down incoming invites from other Office 365 tenants.

This is more an Azure AD/Office 365 Group 'limitation' than a Teams specific one. 

As a side note - you can block outgoing invites to specified domains so that is at least something, I suppose. https://docs.microsoft.com/en-us/exchange/recipients-in-exchange-online/manage-group-access-to-office-365-groups

[#4]

Hi @Lee Ford 

https://docs.microsoft.com/en-us/microsoftteams/manage-external-access

How about this? Check scenario 2. As I read things...it offers the required functionality...

[#5]

Hi Sander,

Unfortunately, that article refers to federation. Federation and Guest access are two different things. See this article for a breakdown.

https://docs.microsoft.com/en-us/microsoftteams/guest-joins

Hope that helps clarify!

Best, Chris