Managing external identities to enable secure access for partners, customers, and other non-employees
It's either that, or create a separate user account for them in each tenant (or consider consolidating the tenants if possible). Going forward, the "native" federation model that powers Teams shared channels might be an option, but that's still in private preview, with public preview slated for next month: https://myignite.microsoft.com/sessions/cfcdfdfa-7401-414d-ab61-4e834281e7ae