question

BenRollman-9943 avatar image
0 Votes"
BenRollman-9943 asked SharonZhao-MSFT commented

External Active Directory Users Unable to Join Teams As Guest

We have users in AD who are technically external users but have been given internal user IDs so they can log into our terminal for a piece of proprietary software. No problems there, but recently we have been trying to invite them to groups in Teams as guests.

One of our employees is sending invites to users via their email. No problems until we invite these users that exist in our AD. We can't send them an invite because they are technically in our AD and it throws an error. (The email we'd use to invite them is also listed in the email field in AD.) When we add them as a member, they aren't able to see the group in Teams we've added them to. They also have SSO on their side, so they login with their IDs, not the ones listed in our AD.

Add to the fact that we've got Duo set up for our 365 tenant so any access to any products will force 2fa. So I set the ID into the security group to be pulled into Duo, but then set them as bypass because it was trying to send a code to an email that doesn't exist.

The IDs in AD have been around forever to access our terminal, so we didn't add them recently. End users also don't want to use a second email just to be able to access our Teams groups.

Not sure how to approach this or if we've painted ourselves into a corner.

office-teams-windows-itpro
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@BenRollman-9943,

How do you add external users in your AD? Contacts in Microsoft 365 admin center or mail user in Exchange Online?

About guest user in Teams, it has no more requirements but anyone with a business account (that is, an Azure Active Directory account) or consumer email account (with Outlook.com, Gmail.com or others) can participate as a guest in Teams, with access to teams and channel experiences. For more information, please refer to this article.

0 Votes 0 ·

IAdding them in AD is just me right clicking in ADUC and creating a new user.

Adding a guest is one of our employees going into the Teams group and inviting people via email.

The issue we have is that she's trying to invite people who are in AD.

It's an odd setup. We're a state association with internal employees, but we also have county associations that we make terminal IDs for so they can use one of our member databases. They otherwise have their own emails, microsoft accounts, etc.

But again, it's moot since they aren't setup to communicate with other organizations.

0 Votes 0 ·
BenRollman-9943 avatar image
0 Votes"
BenRollman-9943 answered

I think this may be moot. The group we're working with won't set up federation so after we got it mostly working they wouldn't turn that on.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SharonZhao-MSFT avatar image
0 Votes"
SharonZhao-MSFT answered SharonZhao-MSFT commented

@BenRollman-9943,

It’s suggested to add the external user as mail user in your environment. The following is the process and it works properly.

  1. Add mail user in Exchange on-premises and synchronize the account to cloud. The mail user has sign in credentials in your organization and can access resources. For more steps, please read this article.

  2. Assign license to this user.

  3. Add this user in Microsoft Teams admin center > Teams: Manage teams > choose the target team and add a member.

  4. Log in Teams client and the team is listed in Teams.


If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.







· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@BenRollman-9943,
Do you try the steps of mail user and how is going now?
If my suggestion helps, please feel free to accept it as answer to benefit people in same situation.

0 Votes 0 ·