Share via

SharePoint External Authentication Sharing

Dahabiyeh, Bahlal 0 Reputation points
2025-11-04T13:53:36.3066667+00:00

This was working in the past. Not 100% sure when it did stopped working.

We have external sharing set to new and existing guest and restricted by domains.

When sharing a site this creates a guest account and the external guest has access.

We normally don't share the whole site and only file\folder that is needed. this in the past would just prompt the user with a OTP and they would then have access to that file or folder.

Basically what the chart says, but now when sharing a file/folder we are getting access denied. Not sure why this is happening all of sudden. User's image

Microsoft 365 and Office | SharePoint | For business | Windows
0 comments No comments

2 answers

Sort by: Most helpful
  1. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

  2. Nam-D 3,855 Reputation points Microsoft External Staff Moderator
    2025-11-04T15:39:29.7466667+00:00

    Dear @Dahabiyeh, Bahlal,

    Thank you for posting on Microsoft Q&A forum.

    Based on your description, it appears that your concern relates to B2B file sharing and guest access. We want to inform you about an important update from Microsoft regarding authentication for B2B collaboration.

    Starting July 2025, Microsoft Entra ID will begin rolling out a new guest authentication experience for B2B collaboration, with full implementation expected by December 2025. Under this update, One-Time Passcodes (OTP) will no longer be used for protecting data. Instead, guest users will sign in using their home organization’s sign-in page, which will enhance usability and reduce confusion during cross-tenant sign-ins.

    What does this mean for you?

    • Guest users will enter their email on your branded sign-in screen and then be redirected to their home organization’s sign-in page to authenticate.
    • This ensures guests see familiar branding and URL endpoints, making the process clearer and more secure.
    • After successful authentication, they will return to your organization to complete the sign-in process.

    Action Required: No administrative action is required at this time. However, we recommend reviewing your current B2B collaboration configuration to ensure it aligns with this upcoming change. This will help minimize any potential impact and ensure a smooth transition for your external users.

    For more details, please refer to the official Microsoft announcement here:

    https://admin.microsoft.com/Adminportal/Home?ref=MessageCenter/:/messages/MC1103608

    Note: This link is accessible only with an admin account

    User's image

    If you have any questions or need assistance reviewing your configuration, please feel free to reach out.

    Thank you for your patience and understanding


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.     

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.