Entra ID external collaboration setting "Guest nvite Restrictions" interoperability with Sharepoint online Sharing settings

Question

Hello team,

How is integrated Entra ID external collaboration settings “Guest Invite settings” with Sharepoint admin sharing setting “New and Existing Guest”.

Sharepoint sharing setting New and existing guest, how this interact with the Entra ID "external collaboration settings" if I share a file to a person who is not a guest in my tenant, however, I am not part of the guest inviter role or admin role.

will the remote person be able to access the file and the system will automatically create the guest account in my Entra ID directory?

 

Addition to it, What would be the integration between Sharepoint online and Entra ID for B2B:

 

https://learn.microsoft.com/en-us/sharepoint/sharepoint-azureb2b-integration

 

There are two external sharing models used in SharePoint and OneDrive:

• SharePoint external authentication
• SharePoint and OneDrive integration with Microsoft Entra B2B

 

 

Sharing method	Files and folders	Sites
Sharing method	Files and folders	Sites
SharePoint external authentication (Microsoft Entra B2B integration not enabled)	No guest account created* Microsoft Entra settings don't apply	N/A (Microsoft Entra B2B always used)
Microsoft Entra B2B integration enabled	Guest account always created Microsoft Entra settings apply	Guest account always created Microsoft Entra settings apply

 

existing guest", so, this is a conflicting setting. how this will work?

Answer 1

Hi @Sergio Londono,

1.The SharePoint sharing setting "New and Existing Guest" interacts with the External collaboration settings in Microsoft Entra External ID. If you set “only users assigned to specific admin roles can invite guest users” in Microsoft Entra External ID, this setting overrides any sharing settings that you configure in Microsoft 365. If I do not invite guests using a users with User Administrator or Guest Inviter roles, a prompt appears:

2.Regarding the integration between SharePoint online and Microsoft Entra B2B, Microsoft Entra B2B provides guest-user authentication and management. With SharePoint and OneDrive integration with Microsoft Entra B2B, use one-time passcodes for external sharing of files, folders, list items, document libraries, and sites.

Once the integration is enabled you and your users don't have to reshare or do any manual migration for guests previously shared with. Instead, when someone outside your organization clicks on a link that was created before Microsoft Entra B2B integration was enabled, SharePoint automatically creates a B2B guest account. This guest account is created for the user who originally created the sharing link. (If the user who created the link is no longer in the organization or no longer has permission to share, the guest won't be added to the directory and the file will need to be reshared.)

However, if Microsoft Entra B2B integration isn't enabled, SharePoint external authentication is used instead and no guest account is created. If Microsoft Entra B2B integration is enabled, a guest account is always created and Microsoft Entra settings apply.

---

If the answer is helpful, please click "Accept as Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.