How would I provision Entra ID and External ID for apps shared with employees and customers?

Question

How would I provision Entra ID and External ID for apps shared with employees and customers?

Paul McCarthy 5

We have several use cases where our staff and customers both need to log in to the same applications for eg booking a meeting room, ordering catering etc. If we set up an external tenant in Entra, will our staff users (who are in the main tenant) be federated into that external tenant too, as is possible with ADB2C? Some of the applications we use are third party and will only allow us one integration with Entra, so it is important we can get the staff and customers to authenticate via a single endpoint.

1 answer

Your answer

Answer 1

Akhilesh Vallamkonda 15,320 Microsoft External Staff Moderator

Hi @Paul McCarthy

Thank you for reaching Microsoft Q&A!

I understand that you are looking for a way to allow both your staff and customers to log in to the same applications using a single endpoint.

If you want to enable your employees to collaborate with business partners and guests, use External ID for B2B collaboration. Allow secure access to your enterprise apps through invitation or self-service sign-up. Determine the level of access guests have to the Microsoft Entra tenant that contains your employees and organizational resources, which is a tenant in a workforce configuration.

For more information, please go through Introduction to Microsoft Entra External ID

B2B collaboration with external guests for your workforce

Hope this helps. Do let us know if you any further queries by responding in the comments section.

Thanks,

Akhilesh.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator

2024-10-17T02:51:19.1566667+00:00

Hi @Paul McCarthy
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Paul McCarthy 5 Reputation points

2024-10-17T13:55:12.54+00:00

Akhilesh - thank you very much for your reply. My main concern with using B2B would be that we can't guarantee that all customers will have a Microsoft account, so we will need to allow for guest access with eg gmail accounts. Customers will be a mixture of corporates and individuals.
Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator

2024-10-18T17:47:52.14+00:00

Hi @Paul McCarthy
Azure AD B2B collaboration allows external users to sign in using their preferred identity, including their Azure AD account, consumer Microsoft account, or a social identity you enable such as Google. With B2B collaboration, you can let external users sign in to your Microsoft applications, SaaS apps, custom-developed apps, and so on. So, you can allow guest access with Gmail accounts or other social identities.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator

2024-10-21T20:56:41.8266667+00:00

@Paul McCarthy
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Share via

How would I provision Entra ID and External ID for apps shared with employees and customers?

1 answer

Your answer