How to give access to IRM protected file to user from another organization?

Question

Hi,

I created the file and protected it with IRM. I gave the access to user from another organization. I don`t have any relations with his\her organization.

After that, I sent this file to user and he\she downloaded it. Then he\she tried to open it but Microsoft redirected he\she to my company login page and tried to authenticate to my organization. Why Microsoft tries to authenticate another user to my organization?

Answer 1

You need to check your portal settings. for e.g. if you enabled conditional access policies and for e.g. if you enable the policy to have MFA authentication required for all cloud access, and if the other user is not enabled MFA, they will receive this error.

Refer the following blog post and see whether it helps you.

https://pupuweb.com/solved-fix-caa200004-aadsts90072-outlook/

https://www.cloudsecuritea.com/2020/01/caa20004-aadsts90072-user-account-from-identity-provider-does-not-exist-in-tenant/

Answer 2

By default, the Azure Rights Management service uses an Azure Active Directory account and an associated email address for user authentication, which makes business-to-business collaboration seamless for administrators. So if the other organization is in Azure Active Directory, there shouldn't be a problem. refer the following FAQ sections.

https://learn.microsoft.com/en-us/azure/information-protection/faqs-rms#when-i-share-a-protected-document-with-somebody-outside-my-company-how-does-that-user-get-authenticated

https://learn.microsoft.com/en-us/azure/information-protection/faqs-rms#can-i-prevent-users-from-sharing-protected-documents-with-specific-organizations

If the user's organization doesn't have managed accounts in Azure, users can sign up for RMS for individuals, which creates an unmanaged Azure tenant and directory for the organization with an account for the user, so that this user (and subsequent users) can then be authenticated for the Azure Rights Management service.

Refer more below.

https://learn.microsoft.com/en-us/azure/information-protection/rms-for-individuals

Hope this helps.