Share via

Added a Gmail external user in Azure External Entra Id, but the identity showed Microsoft instead of their mail

Patil, Yogesh 0 Reputation points
2026-03-07T01:20:57.0166667+00:00

Added a Gmail external user in Azure External Entra Id, but the identity showed Microsoft instead of their mail

Microsoft Security | Microsoft Entra | Microsoft Entra External ID

1 answer

Sort by: Most helpful
  1. Q&A Assist
    2026-03-07T01:21:08.3966667+00:00
    AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

    In Microsoft Entra External ID, the value shown in the Identities property depends on how the guest actually authenticates, not just on the email domain entered when the user is created.

    For B2B collaboration users:

    • Before invitation redemption: When the Gmail user is first invited, the guest account is created with Identities set to the host’s organization domain. At this stage there are no credentials associated with the guest in the host tenant; authentication will be handled later by the user’s own identity provider.
    • After invitation redemption:
      • If the user signs in using a Microsoft account (MSA) associated with that Gmail address (for example, they have previously created a Microsoft account using their Gmail), the Identities property is updated to show Microsoft account.
      • If the user signs in using Google federation (i.e., Google has been added as an identity provider and the user chooses Google on the sign-in page), the Identities property is updated to google.com.
      • If the user uses Email one-time passcode (OTP), the Identities value is mail.

    So, if a Gmail external user appears with identity Microsoft (Microsoft account) instead of google.com or their mail, it means they redeemed the invitation using a Microsoft account credential (MSA) tied to that Gmail address, not via Google federation or email OTP.

    To have future Gmail users show as google.com in Identities, configure Google as an identity provider and ensure they redeem invitations or sign up using the Google option on the sign-in page.


    References:

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.