How to Enforce multi-factor authentication for B2B guest users ?

Question

HI Folks,

I would like some advice to force MFA or SMS to guest users in the tenant who already exists.

I see these links;

1. https://learn.microsoft.com/es-mx/azure/active-directory/external-identities/b2b-tutorial-require-mfa
2. https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-policy-guest-mfa

How are you recommendation? Conditional Access? Do you know other links more useful?

Many Thanks

Answer 1

@Jacobo Garrido

Yes, configuring conditional access policy for all guest users would be better option for getting MFA forced for guest users.

But, the main authentication for guest users will happen in there home tenant.

However, post authentication when user is redirected to resource tenant, that is when user is prompted for MFA.

There are no additional documents for this. You can follow the same steps which are mentioned in the article you mentioned.

Let me now if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.