Evaluating Azure Cross-Tenant Synchronization: Benefits and Concerns
We’re looking into this Azure feature and how it would benefit the 4 tenants we manage. Reading MS learn and other articles, they highlight many of the benefits, but what about the got chas? Several areas of concern right off the bat are: How are users affected with devices not in Intune from one tenant (child - them) accessing a tenant with active CAPs (primary - us) that require compliant enrolled devices? Does the sync take precedence over the CAPs (Conditional Access Policies)? Are there any effects on guest user (b2b) access? How does this affect established SharePoint/OneDrive sharing access. Are the SP/OD sharing settings still in affect? When you sync identities, do you have granular control what gets synced and to what resources? https://learn.microsoft.com/en-us/entra/identity/app-provisioning/known-issues?pivots=app-provisioning#special-characters-are-not-supported-on-joining-properties brings up an issue with special characters. Our child tenants are in the EU, Africa, and in China that use them. Has anyone had issues? Thank you in advance sharing your experiences with this.
Cross-tenant user access to Planner (in Teams)
Hi We are facing an issue with Planner access from cross-tenant member users. After the user changes Tenant, and tries to access a Planner tab in Teams, he/she receives instantly a "Your session has expired." popup, what is keep repeating if you try to hit Login now. We are aware that Planner is not supported on Shared channels (what is meant to be used in cross-tenant collaboration), but this is not a Shared channel. Can someone confirm if Planner is (or will be) compatible with cross-tenant usage?? Gergely BoruzsChatting with cross-tenant synchronization
We have implemented the new cross-tenant synchronization feature (https://learn.microsoft.com/en-us/entra/identity/multi-tenant-organizations/cross-tenant-synchronization-overview). Now, every user has his "own" account in his home tenant, plus the synchronized account in other tenant. So, imagine I am UserA in TenantA, and I want to chat with UserB in TenantB. In my Teams (New Teams), when I search for UserB, I find two entries: "UserB" which is the synchronized account in my tenant (TenantA) "UserB (External)" which is his account in his own tenant (TenantB) I can select both and chat with both, due to New Teams' multi-tenant feature. However, UserB sees my chat only if I use his home tenant account. If I chat with "UserB" (his synchronized account in my tenant), he never sees that in his Teams, unless he manually switches to TenantA. Same for me, if UserB chats with "UserA (External)", I see this in my Teams. But if he chats with "UserA" (my synchronized account in his tenant), I never see that. Is there anything we can do?
