Home

multi-tenant cooperation

%3CLINGO-SUB%20id%3D%22lingo-sub-1248164%22%20slang%3D%22en-US%22%3Emulti-tenant%20cooperation%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1248164%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20everybody%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20working%20at%20a%20university%20where%20we%20run%20two%20tenants%2C%20one%20for%20staff%20and%20one%20for%20students.%20The%20student%20tenant%20was%20set%20up%20for%20%22Microsoft%20Azure%20Dev%20Tools%20for%20Teaching%22%20but%20has%20not%20been%20used%20for%20anything%20else.%20The%20staff%20tenant%20has%20been%20pretty%20much%20dormant%2C%20because%20we%20don't%20trust%20the%20cloud%20and%20try%20to%20avoid%20using%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EToday%20everybody%20is%20excited%20about%20getting%20Teams%20up%20and%20running%20for%20collaboration%2C%20so%20we%20want%20teams%20accessbile%20by%20both%20staff%20and%20students.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20basically%20found%20two%20options.%20External%20access%2C%20related%20to%20sykpe%20for%20business%20(%3F)%2C%20but%20limited.%20No%20group%20chat%2C%20etc.%20so%20not%20really%20what%20we%20are%20looking%20for.%20Guest%20users%20(at%20AAD)%20level%20sound%20way%20better%2C%20but%20there%20is%20a%20catch%3A%20inviting%2020.000%20students%20to%20our%20staff%20tenant%20isn't%20fun%2C%20getting%20them%20all%20to%20accept%20those%20invitations%2C%20etc.%20Invition%20staff%20to%20the%20students%20tenant%20isn't%20much%20better%20(but%20less%20staff%20than%20students...).%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAll%20I%20see%20is%20problems%20while%20my%20boss%20is%20hoping%20for%20solutions.%20%3B)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPutting%20all%20students%20in%20the%20staff%20tenant%20and%20ditching%20the%20student%20tenant%20might%20sound%20like%20the%20way%20to%20go%2C%20but%20there%20are%20compliance%20requirements%20that%20are%20easier%20to%20meet%20if%20those%20tenants%20stay%20separated.%20At%20least%20as%20far%20as%20I%20can%20tell.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWould%20be%20nice%20if%20I%20could%20both%20invite%20and%20accept%20guest%20users.%20Like%20adding%20educatinoal%20staff%20to%20the%20student%20tenant%20as%20guest%20without%20the%20invitation%20process%2C%20since%20staff%20hired%20to%20teach%20the%20students%20can%20be%20told%20to%20accept%20the%20invitation%20to%20the%20student%20tenant%20anyway%2C%20so%20why%20bother%20with%20the%20process%3F%20%3B)%3C%2Fimg%3E%20I%20control%20both%20tenants%20anyway.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBasically%20I'm%20looking%20for%20the%20least%20bad%20option.%20Teams%20has%20some%20more%20guest%20options%20than%20AAD%2C%20that's%20why%20I%20post%20here.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBy%20the%20way%2C%20we%20run%20local%20AD%20but%20it%20is%20not%20connected%20to%20the%20tenants%20in%20AAD.%20No%20directory%20synchronisation%2C%20no%20ADFS.%20Both%20tenants%20are%20managed%20by%20our%20IDM-system%20and%20federated%20with%20Shibboleth.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20help%20would%20be%20greatly%20appreciated%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBest%20regards%3C%2FP%3E%3CP%3EPatrick%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1248164%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ETenants%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Etrust%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Highlighted
Occasional Visitor

Hi everybody,

 

I'm working at a university where we run two tenants, one for staff and one for students. The student tenant was set up for "Microsoft Azure Dev Tools for Teaching" but has not been used for anything else. The staff tenant has been pretty much dormant, because we don't trust the cloud and try to avoid using it.

 

Today everybody is excited about getting Teams up and running for collaboration, so we want teams accessbile by both staff and students.

 

I basically found two options. External access, related to sykpe for business (?), but limited. No group chat, etc. so not really what we are looking for. Guest users (at AAD) level sound way better, but there is a catch: inviting 20.000 students to our staff tenant isn't fun, getting them all to accept those invitations, etc. Invition staff to the students tenant isn't much better (but less staff than students...).

 

All I see is problems while my boss is hoping for solutions. ;)

 

Putting all students in the staff tenant and ditching the student tenant might sound like the way to go, but there are compliance requirements that are easier to meet if those tenants stay separated. At least as far as I can tell.

 

Would be nice if I could both invite and accept guest users. Like adding educatinoal staff to the student tenant as guest without the invitation process, since staff hired to teach the students can be told to accept the invitation to the student tenant anyway, so why bother with the process? ;) I control both tenants anyway.

 

Basically I'm looking for the least bad option. Teams has some more guest options than AAD, that's why I post here.

 

By the way, we run local AD but it is not connected to the tenants in AAD. No directory synchronisation, no ADFS. Both tenants are managed by our IDM-system and federated with Shibboleth.

 

Any help would be greatly appreciated

 

Best regards

Patrick