How to fix Access is blocked by your organization error when joining a specific external meeting in MS Teams

Question

Hi,

I would like to know where to configure in Azure/MTAC or the solution to fix the issue below.

ISSUE: Unable to call or join a meeting using MS Teams for a specific external domain/user

ERROR:

Access is blocked by your organization

Your tenant administrator has restricted which organizations can be accessed. Contact your IT department to request access to the undefined organization

Request ID: ed2141a1a-7fd4-4245-b374-4543dc5a2c00

Correlation id: d6766b9b-3301-495a-9605-a7c327216471

Kindly provide step-by-step instruction on how to configure and enable the settings in Azure and Teams admin center to fix the issue.

Answer 1

Hi @Jervis Ercilla

Based on your case description, you need guidance on planning meetings with external participants.

There are three types of external participants who can attend meetings hosted by your organization:

• Guests - people who are logged in to Teams in your organization using a guest account.
• People from trusted organizations - people who are logged in to Teams in other Microsoft 365 organizations that you have a mutual trust relationship with.
• Anonymous - people whose identity can't be verified. They may be logged in to an organization without a mutual trust relationship or they may not have an account.

Meeting with verified external participants

A verified external meeting participant is one that is logged in to Teams in Microsoft 365 in way that you trust. There are two types of verified external meeting participants:

• Guests - people who are logged in to Teams with a guest account in your directory. Guests can be anyone with an email address, including people from other Microsoft 365 organizations.
• People from trusted organizations - people in other Microsoft 365 organizations with which you have configured a trust relationship in external access and who have the required user-level external access permissions

External participants who aren't verified in one of these two ways are considered anonymous.

People who don't have a work or school account in Microsoft 365 must be invited as guests to your organization and can join meetings using guest access. People in other Microsoft 365 organizations can join meetings through the external access feature. (They can also join as guests if they have guest accounts.)

When planning your configuration for external meetings, consider the types of meetings where you want all participants to be verified and which can allow anonymous participants. You might want all confidential meetings to have only verified participants, whereas there may be marketing or sales meetings where anonymous participants are fine.

Meetings with non-Microsoft 365 organizations

When meeting with people from non-Microsoft 365 organizations, you must add each individual who you want to meet with to your organization's directory as guests in order for them to be verified meeting participants.

Guest access in Teams must be enabled in order for guests to be able to join meetings. Your users can invite guests to their teams (which will add them to the directory), or you can add them directly in the Microsoft Entra admin center.

Guests must log in to Teams with their guest account in order to join meetings. If they're not logged in, they will be considered anonymous.

Meetings with other Microsoft 365 organizations

To have meetings with verified participants in other Microsoft 365 organizations, you can either use guest access as described above, or you can use the external access feature in Teams. For more information about the differences between guest access and external access, see Use guest access and external access to collaborate with people outside your organization.

In external access, you define which Microsoft 365 organizations you want to trust and which users in your organization you want to allow to host meetings with them. The other organization must similarly configure external access to trust your organization and to allow their users to communicate with external Teams and Skype for Business users.

Note that meeting participants from other organizations who don't have the correct external access permissions will be considered anonymous when they join meetings.

Similarly, if a meeting organizer in your organization doesn't have external access permissions, all external participants joining their meetings will be considered anonymous unless they're logged in with a guest account.

If anonymous meeting join is turned off, anonymous participants won't be able to join meetings at all.

For information on how to configure external access, you need to log in to the Teams Admin Center as an administrator and see Manage external meetings and chat with people and organizations using Microsoft identities.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---