Microsoft Security Microsoft Entra Microsoft Entra External ID

0 answers

Global Admin getting "Insufficient Privileges" on guest invitation after bulk invite (Free Tier)

Hi team, I am a Global Administrator on a free Microsoft Entra ID tenant. I recently attempted a bulk invitation of 11 external users for a legitimate business project. Immediately after, our directory-wide ability to invite guest users was completely…

asked

Veeresha 0

edited the question

Jack-Bu 6,775 Microsoft External Staff Moderator

0 answers

Join: Microsoft Azure Q&A Champions Program

The Microsoft Azure Q&A Champions Program recognizes and empowers a global community of internal and external Azure experts who help customers succeed by providing high-quality, trusted answers on Microsoft Q&A. The program scales expert led…

asked

Ashley Swearingen 0 Microsoft External Staff Moderator

2 answers

Direct Password Reset URL / User Flow for Microsoft Entra External ID (CIAM)

We are evaluating Microsoft Entra External ID (External Tenant) and are looking for functionality similar to Azure AD B2C's dedicated Password Reset User Flow. In Azure AD B2C, we can create a standalone Password Reset policy/user flow and provide users…

asked

Naman Gupta 0

answered

RoryB 620

1 answer

Guest invitations are blocked due to suspicious activity in Microsoft Entra ID

In our tenant, guest invitations in Microsoft Entra ID B2B collaboration are blocked. Users/admins receive the message: "Invitations to this directory have been blocked due to suspicious activity. Contact Microsoft support for…

asked

MICHAŁ MATHIAK 0

edited an answer

Bence Weiszmann 745

0 answers

AADSTS500207 calling the new credential management API (Me-CredentialProfileManagement) with an External ID (CIAM) local account

We're trying to use the new preview credential management API (https://learn.microsoft.com/en-us/entra/identity-platform/reference-credential-management-api) to self-service register a passkey for a signed-in customer in a Microsoft Entra External ID…

asked

Pradeep Parmar 0

2 answers

Self registration portal in Entra ID for Guest accounts

Hi, In entra ID is it possible to setup a self registration portal for the guest account so can use that and register the accounts in entra ID instead of the admin sending the guest invite manaully. If there is such optioin how to enable that and what is…

asked

SAGA 45

commented

Bence Weiszmann 745

0 answers

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

I have a tenant to have a MS Team for a workplace club with my collegues. My work doesn't let us have it at the work tenant. When I try to invite my collegues something went blocked. It says "Invitations are blocked for this directory due to…

asked

Gabriel Fjellander 0

0 answers

Error after marking the account as internal. "interaction_required: AADSTS16000: User account from identity provider; does not exist in tenant 'Microsoft Services' and cannot access the application;

I have found the solution... thank you! No actions required...

asked

Fabio Godinho 0

edited the question

Fabio Godinho 0

1 answer

How to add owner in enterprise application ealiear user unable to add another user as they dont have access to there sc alt account

We have enterprise application and there are 2 owner both have scalt login email but they are unable to login with scalt and we need to add token configuration which require owner so is it possible to add their @microsoft email as owner let me know if…

asked

Hirachand Mudhale (INFOSYS LIMITED) 0 Microsoft External Staff

answered

AI answer

1 answer

Azure admin account lost after EXT conversion

Hi, I had an account at ******@mycompany.com to access my Azure portal. I also had a personal account with the same address to access my Microsoft account. I requested to integrate the Azure tenant from the Power Platform, thinking they would merge. In…

asked

CTD LTD 0

answered

CTD LTD 0

0 answers

Gaining access to the Azure AD / Entra ID B2C tenants before gracefully decommissioning it.

I am trying to gain access to many of the unused or neglected Azure AD B2C tenants that were created in my Azure platform https://portal.azure.com/#browse/Microsoft.AzureActiveDirectory%2Fb2cDirectories before decommissioning them properly using this…

asked

EnterpriseArchitect 6,391

0 answers

Unable to invite external B2B guest users – invitations blocked due to suspicious activity

Hello Microsoft Team, We are unable to invite any external B2B guest users to our Microsoft Entra ID tenant. All invitation methods fail (Entra Admin Center, SharePoint Online, OneDrive and Microsoft Graph API) with the following error: "Invitations…

asked

Tom Gl 0

edited the question

Tom Gl 0

2 answers

Azure AD B2C user flow not visible in portal or Graph list but still accessible by ID and working

We are experiencing a strange issue with an Azure AD B2C tenant where an existing user flow appears to be partially invisible. Our tenant is xxxxxxxxxx.onmicrosoft.com. We have a user flow named B2C_1_signin that is currently used by several applications…

asked

Fabien 0

commented

Arjan van Hugten 0

0 answers

Microsoft Entra External ID tenant stuck in Provisioning with zero tenantId after 404

Hello, I am unable to create a Microsoft Entra External ID (CIAM) tenant. The operation started on 12 August 2026 at 14:14 UTC and remains in “Provisioning” far beyond the documented creation time. Domain: pawwingsorg.onmicrosoft.com Resource group:…

asked

Samet Sığırcı 0

1 answer

Move to phishing-resistant authentication before SMS and voice retire

We received the Microsoft notice “Move to phishing-resistant authentication before SMS and voice retire,” stating that Microsoft-provided SMS and voice authentication will retire on February 1, 2027. Our production Azure AD B2C tenant uses IEF custom…

asked

Scott Weathers 20

accepted

Scott Weathers 20

1 answer

Microsoft Entra External ID – Custom SAML Identity Provider is never invoked during B2B invitation redemption

Hi everyone, I'm trying to configure Microsoft Entra External ID (B2B Collaboration) with a Custom SAML Identity Provider, but during invitation redemption Microsoft Entra never redirects the user to the configured SAML IdP. To avoid suggesting steps…

asked

WinLogon 0

answered

RoryB 620

0 answers

Entra External ID published CIAM endpoint returns AADSTS500210

This was submitted through Priority Community Support. The issue requires Microsoft backend investigation because the Azure portal publishes the endpoint, but the Microsoft-hosted endpoint rejects the portal-confirmed tenant/domain pair. Please escalate…

asked

Barbara Braun 1

1 answer

Need Help: "Insufficient privileges to complete the operation" in Microsoft Entra

Hi everyone, I am running into a permissions issue while working with Microsoft Entra ID and I'm hoping someone can point me in the right direction. The Issue: Whenever I try to invite an external user (B2B guest) to our directory, I receive the…

asked

Nicolas Diaz Arcila 0

answered

Marcin Policht 104.4K MVP Volunteer Moderator

1 answer

Recommended way to identify Native Authentication error responses

Hi, I'm evaluating Microsoft Entra External ID Native Authentication and have been testing the error responses returned by the Sign Up, Sign In, Password Reset, and Refresh Token flows. During my testing, I observed that error responses consistently…

asked

Amanda 0

answered

AI answer

0 answers

B2B guest invitations blocked tenant-wide: "Invitations are blocked for this directory due to suspicious activity" — how to get the block reviewed without a support plan?

Since 2026-08-05, every B2B guest invitation in our tenant fails. POST https://graph.microsoft.com/v1.0/invitations returns: 403 Forbidden "Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for…

asked

Raul Moldovan 0

edited the question

Raul Moldovan 0

Microsoft Security | Microsoft Entra | Microsoft Entra External ID

Filter

Answers

Comments

4,062 questions with Microsoft Security | Microsoft Entra | Microsoft Entra External ID tags

Global Admin getting "Insufficient Privileges" on guest invitation after bulk invite (Free Tier)

Join: Microsoft Azure Q&A Champions Program

Direct Password Reset URL / User Flow for Microsoft Entra External ID (CIAM)

Guest invitations are blocked due to suspicious activity in Microsoft Entra ID

AADSTS500207 calling the new credential management API (Me-CredentialProfileManagement) with an External ID (CIAM) local account

Self registration portal in Entra ID for Guest accounts

Invitations are blocked for this directory due to suspicious activity. Please contact Microsoft support for help.

Error after marking the account as internal. "interaction_required: AADSTS16000: User account from identity provider; does not exist in tenant 'Microsoft Services' and cannot access the application;

How to add owner in enterprise application ealiear user unable to add another user as they dont have access to there sc alt account

Azure admin account lost after EXT conversion

Gaining access to the Azure AD / Entra ID B2C tenants before gracefully decommissioning it.

Unable to invite external B2B guest users – invitations blocked due to suspicious activity

Azure AD B2C user flow not visible in portal or Graph list but still accessible by ID and working

Microsoft Entra External ID tenant stuck in Provisioning with zero tenantId after 404

Move to phishing-resistant authentication before SMS and voice retire

Microsoft Entra External ID – Custom SAML Identity Provider is never invoked during B2B invitation redemption

Entra External ID published CIAM endpoint returns AADSTS500210

Need Help: "Insufficient privileges to complete the operation" in Microsoft Entra

Recommended way to identify Native Authentication error responses

B2B guest invitations blocked tenant-wide: "Invitations are blocked for this directory due to suspicious activity" — how to get the block reviewed without a support plan?