how to allow user of other organizations to use sso authentication for a clientid

Question

For an existing Webapplication we want to add the possibilty using SSO Microsoft authentication. For this an App has been registered in Azure. Supported account types shows:

Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)

The following error occured, if the user doesn't belongs to out company.

The selected user account does not exist in the client “Textcompany AG” and cannot access the application “43d21d82-....” in this client. The account must first be added to the client as an external user. Use a different account.

Thanks for any help

Marc

Answer 1

Hi @MarcLwenthal-1786

Thank you for reaching Microsoft Q&A Forum!

I understand that you would like to know how to add the external user to your tenant.

This error message indicates that the user account you are trying to use does not exist in the Entra ID tenant associated with the client "Textcompany AG". To access the application "43d21d82-...." in this client, the user account must first be added to the client as an external user.
To add an external user to the Entra ID tenant please follow the below article
https://learn.microsoft.com/en-us/entra/external-id/b2b-quickstart-add-guest-users-portal

Hope this helps. Do let us know if you any further queries by responding in the comments section.

Thanks,

Akhilesh.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.