whitelist a domain for Teams online in a federated environment.

Question

whitelist a domain for Teams online in a federated environment.

Gurudas 951

Hello Team,

Please let me know how to whitelist a domain in a federated environment and verify the same in the MS-Teams online in Office 365 via GUI and powershell with screenshots.

My domain : contoso.com
External Domain: asdf.com

Need to have Teams chat between users belonging to these two domains.

Thank you in advance :)

Accepted answer

1 additional answer

Your answer

Answer 1

Yuki Sun-MSFT 41,376 Moderator

Hi @GurudasSatardekar,

Need to have Teams chat between users belonging to these two domains.

You can configure the External Access in your organization by adding the particular domain into the Allow list via Teams Admin Center:

In the Teams admin center, go to Users > External access.
Under Choose which domains your users have access to, choose Allow only specific external domains.
Select Allow domains.
In the Domain box, type the domain that you want to allow and then click Done.
Click Save:

If you would like to make the change via powershell, you can connect to Teams Powershell and then run the command

$list = New-Object Collections.Generic.List[String]  
$list.add("asdf.com")  
Set-CsTenantFederationConfiguration -AllowedDomainsAsAList $list

More information about managing External access in Teams, hopefully you can find the document below helpful:
Manage external access in Microsoft Teams

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Yuki Sun-MSFT 41,376 Reputation points Moderator

2022-04-29T09:55:09.617+00:00

Hi @GurudasSatardekar,

Just checking in to see if above information was helpful. If you have any questions or need further help on this issue, please feel free to post back.
ISABEL LAVADO SANCHEZ 5 Reputation points

2023-01-12T10:31:58.3166667+00:00
Hello,

I implemented your solution and it works perfectly in my DEV server.

But, in my PROD environment, it doesn't work because the Teams module has a old version and doesn't support the parameter AllowedDomainsAsAList:
"set-cstenantfederationconfiguration does not support PS list modifier in the AllowedDomainsAsList in this version of module"

In that moment, I cannot upgrade to the latest version.

I'm trying to develop the same with "AllowedDomains" parameter, but I see 2 things:

This parameter doesn't allow to Add domains, but Replace all the Domains list, right?

I cannot dinamically create the list $newAllowList. The examples I found are below, and they are building variables one by one. In my case, I have a 'variable' name of domains, so I don't know how to pass them to de Set-CsTenantFederationConfiguration

$x = New-CsEdgeDomainPattern -Domain "contoso.com"

$y = New-CsEdgeDomainPattern -Domain "fabrikam.com"

$newAllowList = New-CsEdgeAllowList -AllowedDomain $x,$y

Set-CsTenantFederationConfiguration -AllowedDomains $newAllowList

I would really appreciate your help, because I'm blocked with this issue.

Isabel.

Answer 2

Gurudas 951

I do appreciate @isabel and @Yuki for thier quick response. It has resolved my query. Cheers! Have a great day ahead.

Share via

whitelist a domain for Teams online in a federated environment.

1 additional answer

Your answer