Using the B2B capability to create guest records in our Organization and allow SSO into our AAD registered apps is a very useful integration.
I would really love to somehow see the high level status (link status) of the foreign Org ID record. Not personal information, just very simple something like (Deleted; Disabled; Current/Linked; (or possibly un-link/un-redeemed)
Here's the use case:
I work for contoso.com, and collaborate with another business fabrikam.com. Using the b2b invite capability, I invite Fred@Fabrikam into Contoso.com. Fred redeems the invitation.
Fred is then added to some groups/given access to some AAD registered applications in the Contoso tenant. Some of these registered applications are AAD Certified applications, supporting SCIM, and advanced provisioning/deprovisioning activities. Some of these applications have high cost 'seat' licensing.
Fred collaborates for a while and then wins the lottery, and leaves Fabrikam. Fabrikam removes Fred from the Fabrikam Tenant. Fabrikam never tells Contoso about this.
Eventually Contoso will figure out that Fred isn't logging into contoso anymore, and via attestation/last login horizon processes, will remove the guest record in contoso.com.
It would be really cool to somehow have the contoso.com tenant be able to display that the fred contoso guest record is no longer viable, as Fabrikam has deleted the Fred@Fabrikam user. Some sort of periodically generated report that lists out the contoso guest records that are no longer valid. Contoso could then remove the guest record from groups, initiating deprovisioning, and app license reclamation....
