How to have external users authenticate OneDrive shared access via onetime-passcode?

Question

Hello,

Using 365 Business, I am sharing folders to external clients while needing to provide secure access to these folders. Currently, when they receive the email, it says, "Verify your identity." Enter your email and click Next. It is bringing users to the Microsoft login screen. That's not the expected behavior. We would like for the client to receive a "Request Verification Code" with a button that says, send code, not next as I stated above. This action will then send an email to the user's email account, and then retrieve the passcode for access to the shared folder. Does anyone have farmiliarity with how this works?

Thank you

Rick

Answer 1

Hi @Ricardo Benton , 

Thank you for reaching out to the Microsoft Q&A Forum.  Based on my tests, to enter the verification code and avoid logging in with MFA, please create a Conditional Access policy that makes internal users require MFA and external users does not require MFA. Please correct me if I misunderstood. 

Here are steps: 

1.Go to Entra Admin Center (you will need to be Global Administrator) -> Protect & Secure -> Conditional Access -> New policy. 

2.In the Users section: 

3.In the Cloud apps and sections: 

4.In the Grant section: 

5.Enable policy. 

If prompted to Microsoft Login page, if the external user is using @gmail.com, you could still type Google email address and receive the verification code. 

I hope this helps.  If you have any further questions or need additional assistance, please feel free to ask. 

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.