Microsoft Azure Extra External Invites Issue

Question

We have 2 users. We set them up with one primary email but Microsoft brings over a secondary email(not sure where this is getting picked up from) causing the user not to get into the application. Due to these emails being linked.  Two separate profiles for one user.

The ask is:

User 1: Created external user with a google account within the invitation. After the invitation was sent i noticed his account has 2 emails. Google & Yahoo

User 2: Is having the same issue but vise verse. Setup as yahoo. but is showing yahoo & google.

Having two emails is causing issues.

 

Answer 1

Hi @Christopher Hunkele
I understand that you are facing issue with the user invitations in Microsoft Azure, particularly with users having multiple emails associated with their accounts, which is preventing them from accessing the application properly.

This often occurs due to the way Azure handles external users with B2B collaboration. When inviting users, Azure checks for any existing accounts linked to the email domain used for the invitation. If a user has a personal Microsoft account associated with that email, it can lead to both the personal and business accounts being linked, which causes conflicts.

If either user has a Microsoft account associated with the email being used, they may need to rename or unlink that personal account to avoid conflicts. You can refer them to this guide on changing personal Microsoft accounts.

Consider re-sending the invitation after confirming that no conflicts exist. Make sure they follow the steps to accept the invitation properly.

Hope this helps. Do let us know if you have any further queries.
If this answers your query, do click `Accept Answer` and `Yes`.

Answer 2

Hello Christopher Hunkele,

Thank you for raising this issue. I would like to provide my findings and proposed solution:

Root Cause:

• This behavior is typically due to how Microsoft accounts (personal accounts) manage email aliases and linked identities:

• When a user accepts an invitation using a Microsoft personal account (e.g., Google or Yahoo), Microsoft may associate multiple email addresses with that identity.
• These additional emails are often aliases or linked accounts configured in the user's Microsoft account profile.
• Microsoft Entra ID (Azure AD) automatically pulls these values from the user’s home tenant (Microsoft Account system), not from your tenant.

What you can do:

Since this issue originates from the Microsoft Account system, the best course of action is:

1. Ask the affected users to review their Microsoft Account settings:

Visit: https://account.microsoft.com/profile

Check for any linked email addresses or aliases under their account.

Remove any unnecessary aliases if possible.

2. Reinvite the user after cleanup:

Once the user has removed the secondary email or alias, you can delete the existing guest user from your tenant and send a new invitation using the correct identity provider.

3. Contact Microsoft Account Support:

If the users are unable to remove the aliases themselves, they should contact Microsoft Account support directly:

https://support.microsoft.com/account-billing

Kindly let me know if this work for you and please let me know if you have any further question.

If I have answered your question, please accept this as answer as a token of appreciation and don't forget to give a thumbs up for "Was it helpful"!

Best regards,