Microsoft Security Microsoft Entra Microsoft Entra External ID

1 answer

Recommended way to identify Native Authentication error responses

Hi, I'm evaluating Microsoft Entra External ID Native Authentication and have been testing the error responses returned by the Sign Up, Sign In, Password Reset, and Refresh Token flows. During my testing, I observed that error responses consistently…

asked

Amanda 0

answered

AI answer

1 answer

Microsoft Entra External ID – Custom SAML Identity Provider is never invoked during B2B invitation redemption

Hi everyone, I'm trying to configure Microsoft Entra External ID (B2B Collaboration) with a Custom SAML Identity Provider, but during invitation redemption Microsoft Entra never redirects the user to the configured SAML IdP. To avoid suggesting steps…

asked

WinLogon 0

answered

WinLogon 0

0 answers

B2B guest invitations blocked tenant-wide: "Invitations are blocked for this directory due to suspicious activity" — how to get the block reviewed without a support plan?

Since 2026-08-05, every B2B guest invitation in our tenant fails. POST https://graph.microsoft.com/v1.0/invitations returns: 403 Forbidden "Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for…

asked

Raul Moldovan 0

edited the question

Raul Moldovan 0

0 answers

Stuck CIAM/External ID tenant with provisioningState "Failed": can't add admins, can't delete, sign-in returns AADSTS500208

We have a Microsoft Entra CIAM directory (External ID tenant) whose resource JSON shows "provisioningState": "Failed". Because of this, we can't add admins to the tenant itself, the tenant doesn't appear under Entra ID → Manage…

asked

Greg 0

1 answer

How to route users directly to a custom OIDC identity provider by email domain in an Entra External ID external tenant

We have a Microsoft Entra External ID external tenant with custom OpenID Connect identity providers that federate to Microsoft Entra workforce tenants (one provider per organization). Requirement: users from each organization should be taken straight to…

asked

Chintan Sukhadiya 0

answered

Jerald Felix 18,200 Volunteer Moderator

1 answer

External ID – Microsoft Account (LiveID) Custom OIDC Provider Not Selected During Username Discovery

Hello Microsoft Support Team, I am experiencing an issue with Microsoft Account (MSA / LiveID) authentication in an External ID tenant and would like assistance understanding whether the current behavior is expected. Environment External ID Tenant …

asked

Abhiram Mangde 180

accepted

Abhiram Mangde 180

3 answers

Why is my tenant suddenly not allowing me to invite guest users?

We have setup a new tenant and successfully invited some guest users. Suddenly, whenever I invite a guest user ("Invite external user"), I receive a vague error in the alert pop-up indicating " User invitation failed, Insufficient…

asked

Paul Stirpe 1

commented

Paul Stirpe 1

1 answer

How to auto-provision users in an external tenant on first sign-in via a custom OIDC identity provider

We run Microsoft Entra External ID external tenants with a custom OIDC identity provider (federating to a Microsoft Entra workforce tenant) attached to a sign-up and sign-in user flow. Local-account self-service sign-up is disabled by…

asked

Chintan Sukhadiya 0

answered

AI answer

0 answers

Unable to delete Azure AD B2C Tenant

I have an old Azure AD B2C tenant that needs to be removed. During the deletion process, I cleaned up all resources that needed to be cleared before I could push the delete button. I may have deleted my admin account in the tenant and now I am unable to…

asked

Charlie McCracken 0

0 answers

Cuenta personal asociada como invitado B2B a un tenant desconocido y no puedo abandonarlo

Hola: Mi cuenta personal de Microsoft aparece asociada a un directorio de Microsoft Entra que no reconozco ni administro. Datos del directorio: Nombre mostrado: xxxx Dominio: xxxx.onmicrosoft.com Tenant ID: xxxxxxx La asociación probablemente se…

asked

Jose A Linares 0

2 answers

External ID (CIAM): local email+password sign-ins for some users no longer validated in our tenant; admin password resets ineffective

Since mid-July 2026, a growing subset of customers in our Entra External ID tenant, specifically local email+password accounts whose email domain is verified in another Entra tenant, can no longer sign in. Failed attempts produce no sign-in log entries…

asked

Darrell Draney 0

answered

pogula kavitha 0

1 answer

B2B guest invitations blocked tenant-wide — "Invitations are blocked for this directory due to suspicious activity" — request review and removal of block

** Hello, I am the Global Administrator of the tenant below. All B2B guest invitations in our tenant are failing tenant-wide, and Microsoft Graph returns an explicit fraud-hold error asking us to contact support. I am requesting an investigation and…

asked

Kumar k 5

edited an answer

Jerald Felix 18,200 Volunteer Moderator

1 answer

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

Hi - I am working on a fast moving prototype and needed to quickly get some external users access to Databricks services. After only 9 requests, I can no longer invite external users with this message: …

asked

Patrick Sullivan 0

answered

Jerald Felix 18,200 Volunteer Moderator

1 answer

Users from internal domain rpsconsulting.in are able to access the application, but external users are unable to access, we have also configure B2B collabration

We have configured B2B integration and users from internal domain rpsconsulting.in are able to access the application, but external users are unable to access.

asked

Ali Sharief 0

answered

Jerald Felix 18,200 Volunteer Moderator

1 answer

Mandatory passkeys guidance

I have been told that my ID uses an external sign-in. A recent email I received said passkeys will be required. I need some guidance and assistance. I have had authentication issues in the past (unable to access resources) which makes me very nervous and…

asked

Jack Halpern 20

answered

Jerald Felix 18,200 Volunteer Moderator

3 answers

Custom URL Domain association on External ID tenant not propagated to aadg fleet — HTTP 302 to login.microsoftonline.com instead of CIAM serving

Product: Microsoft Entra External ID Tenant: TrashMobEcoDev (8577fa31-4b86-4e4b-8b02-93fba708cb19) Issue: Custom URL Domain association not propagated to Entra AAD Gateway (aadg) fleet Configuration: CIAM external tenant…

asked

Joe Beernink 0

answered

Vincentius Indrayanto 20

1 answer

Cannot delete a CIAM (External ID) tenant — no reachable Global Administrator

A CIAM/External ID tenant in our subscription is stuck in a Failed delete state. Its only administrators are no longer reachable, so we cannot sign in to remove the remaining users and apps that block deletion (AADSTS50020 on any sign-in attempt). We are…

asked

Ferenczy Roland 0

answered

Demi-N 20,075 Microsoft External Staff Moderator

0 answers

This tenant has been blocked due to inactivity = Error code: AADSTS5000225

I have been locked out of my Azure account due to inactivity. The odd thing is that I was just in the environment last week. It appears the timestamp is from today. I can't seem to create a support ticked to get this unblocked either. When I log into…

asked

pat n 20

commented

pat n 20

1 answer

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help

I have successfully invited 8 guest users and am now blocked from adding more due to suspicious activity. MS case ID is not understanding the issue. It is not a user problem, my tenant is blocked. The other question is around sensitivity as 8 guest…

asked

Stephen Finch 0

commented

Admin Call4Benefits 0

1 answer

Azure AD B2C Supported Countries for SMS

Hello, I had a question pertaining to Azure AD B2C regarding SMS that I couldn't find in the docs. What countries do Azure AD B2C support for SMS? Thank you.

asked

Kristy-1127 20

accepted

Kristy-1127 20

Microsoft Security | Microsoft Entra | Microsoft Entra External ID

Filter

Content

4,047 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags

Recommended way to identify Native Authentication error responses

Microsoft Entra External ID – Custom SAML Identity Provider is never invoked during B2B invitation redemption

B2B guest invitations blocked tenant-wide: "Invitations are blocked for this directory due to suspicious activity" — how to get the block reviewed without a support plan?

Stuck CIAM/External ID tenant with provisioningState "Failed": can't add admins, can't delete, sign-in returns AADSTS500208

How to route users directly to a custom OIDC identity provider by email domain in an Entra External ID external tenant

External ID – Microsoft Account (LiveID) Custom OIDC Provider Not Selected During Username Discovery

Why is my tenant suddenly not allowing me to invite guest users?

How to auto-provision users in an external tenant on first sign-in via a custom OIDC identity provider

Unable to delete Azure AD B2C Tenant

Cuenta personal asociada como invitado B2B a un tenant desconocido y no puedo abandonarlo

External ID (CIAM): local email+password sign-ins for some users no longer validated in our tenant; admin password resets ineffective

B2B guest invitations blocked tenant-wide — "Invitations are blocked for this directory due to suspicious activity" — request review and removal of block

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

Users from internal domain rpsconsulting.in are able to access the application, but external users are unable to access, we have also configure B2B collabration

Mandatory passkeys guidance

Custom URL Domain association on External ID tenant not propagated to aadg fleet — HTTP 302 to login.microsoftonline.com instead of CIAM serving

Cannot delete a CIAM (External ID) tenant — no reachable Global Administrator

This tenant has been blocked due to inactivity = Error code: AADSTS5000225

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help

Azure AD B2C Supported Countries for SMS