Adding connected organizations with powershell
Hi, When adding connected organizations using Powershell, the connected organization is added with auth type: OTP/Microsoft account. When adding the connected org using Entra portal, the org is correctly added as a Microsoft Entra ID tenant. Is there any way to add the org as a Microsoft Entra ID tenant programatically?
MS Teams - External Access (Federation) Conditional Access
I am familiar with setting up Conditional Access policies to block member and guest users, using named locations but can't find information on whether these policies would also be applied to federated external users of Teams - e.g. I have CAP to block non-UK access to Teams service - are Teams federated users affected by this policy? Can anyone answer this please and ideally reference the relevant Microsoft Docs article? [Update] https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/teams-access-policies?view=o365-worldwide I think this article has the answer, CAP doesn't apply to external access: External access is for an external user that does not have an Azure AD B2B account. External access can include invitations and participation in calls, chats, and meetings, but does not include team membership and access to the resources of the team. Conditional Access policies only apply to guest access in Teams because there is a corresponding Azure AD B2B account.
Skype for Business(On premise) MFA using thirdparty MFA provider
Hi Team, I saw Skype for business app/mobile app can be configured for MFA using Modern authentication . I read on Microsoft documentation MFA can be done using Azure AD and ADFS. Is it possible to configure it using any external IDP or federation server sitting on premise without using Azure AD(Cloud). We have vendors like Ping, IBM which supports federation server+MFA capability I request you to please provide any input you have on this type of integration. Thanks Regards, DevendraDomain based open federation
I want to allow open federation for users on one domain, but restrict federation for users on another domain. It seems the only way to do this today is to move users to separate Office 365 tenants, which I don't think is a great solution especially when there's a bunch of stakeholder systems in place. Is there any plan to allow this??
