MS Teams - External Access (Federation) Conditional Access
I am familiar with setting up Conditional Access policies to block member and guest users, using named locations but can't find information on whether these policies would also be applied to federated external users of Teams - e.g. I have CAP to block non-UK access to Teams service - are Teams federated users affected by this policy? Can anyone answer this please and ideally reference the relevant Microsoft Docs article? [Update] https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/teams-access-policies?view=o365-worldwide I think this article has the answer, CAP doesn't apply to external access: External access is for an external user that does not have an Azure AD B2B account. External access can include invitations and participation in calls, chats, and meetings, but does not include team membership and access to the resources of the team. Conditional Access policies only apply to guest access in Teams because there is a corresponding Azure AD B2B account.Domain based open federation
I want to allow open federation for users on one domain, but restrict federation for users on another domain. It seems the only way to do this today is to move users to separate Office 365 tenants, which I don't think is a great solution especially when there's a bunch of stakeholder systems in place. Is there any plan to allow this??
