Set up Viva Glint for a multitenant organization

Multitenant organization (MTO) is a Microsoft 365 feature that enables your company to form a tenant group in your organization. MTO allows users in a tenant group to access an instance of Microsoft Viva Glint installed in only one tenant. Glint admins can survey and grant report access to employees across the tenant group for an organization-wide view of employee sentiment. Use the guidance in this article to learn more about multitenant organization setup, syncing users between tenants, and ensuring all users exist in the Glint application. Learn more about MTO.

Terminology

• Target tenant: The tenant where Glint is installed and where the Microsoft 365 global admin sets up an MTO policy.
• Source tenant: Any other tenants with users that access Glint in the target tenant.

Get started

Select a step to jump to instructions for a specific part of multitenant organization setup for Viva Glint.

	Plan for MTO		Set up MTO		Sync users		Import users from all tenants to the Glint app

Plan for MTO

Meet internally with your MTO stakeholders, review requirements, and consider Glint survey access methods to plan for your MTO setup.

Note

Multiple installations of Glint on one tenant aren’t currently supported.

	Step roles involved	More information
	Meet with stakeholders Microsoft 365 global admin Viva Glint admin IT team members Glint project team members	Determine: How many tenants your organization uses Whether employees exist in different tenants What your Glint survey needs are across different tenants and employee populations How you currently use Glint for organization-wide surveys
	Review requirements Microsoft 365 global admin	All tenants exist in the same cloud All tenants use Microsoft Entra ID Glint is installed in one tenant where all Glint licenses used in the MTO are purchased (regardless of the home tenant of the user) Target and source tenant prerequisites License requirements Learn about MTO limitations
	Determine survey access methods and users to sync Viva Glint admin Glint project team	Authentication with Microsoft Entra ID Survey takers must exist in Entra and in the Glint app Personalized links Survey takers need to exist in the Glint app only Attribute-based survey access Survey takers need to exist in the Glint app only Learn more about Glint survey access methods All users that access survey results must exist in Entra

Tip

See Viva Glint for a multitenant organization FAQ for answers to commonly asked MTO, cross-tenant sync, and B2B collaboration questions.

Set up MTO

Microsoft 365 global admins can set up MTO in the Microsoft 365 admin center (MAC) or using the Microsoft Graph API. Setup in the Microsoft 365 admin center offers a user-friendly experience with simple and quick configuration steps. Microsoft Graph API configuration gives admins more granular control and advanced customization and automation options. Consider your organization’s level of complexity across tenants when choosing an MTO setup method.

Tip

MTO setup in the Microsoft 365 admin center is recommended and is the most commonly used setup method.

Important

If your organization already uses B2B collaboration or cross-tenant synchronization to sync users, an MTO setup is still required. MTO and (an included MTO policy) identifies trusted domains and tenants.

	Step roles involved	More information
	Option 1: Set up MTO in MAC Target tenant Microsoft 365 global admin Source tenant Microsoft 365 global admin	As the target tenant admin, set up a new MTO in MAC As the target tenant admin, add tenants to your MTO in MAC As a source tenant admin, join an MTO
	Option 2: Set up MTO with the Microsoft Graph API Target tenant Microsoft 365 global admin Source tenant Microsoft 365 global admin	As the target tenant admin, sign in to the target tenant and create an MTO As the target tenant admin, add tenants to the MTO As the source tenant admin, sign in to the source tenant and join the MTO As the target tenant admin, setup a cross-tenant access policy and configure inbound user sync

Sync users

There are two options to sync users for MTO and Viva Glint: B2B collaboration or cross-tenant synchronization. Both options result in the creation of B2B collaboration users. Cross-tenant synchronization automatically updates users and removes them when they leave the organization. Review prerequisites for each method:

• cross-tenant synchronization prerequisites
• B2B collaboration prerequisites

Tip

Cross-tenant synchronization is recommended and offers a more automated and streamlined user sync method.

Important

• If your organization already has cross-tenant synchronization set up for users that need to access Glint in the target tenant, skip this step.
• If your organization uses B2B direct connect, accounts for source tenant users aren't created in the target tenant. Cross-tenant synchronization is still needed to sync users and doesn't affect any existing B2B direct connect setups.

	Sync option roles involved	More information
	Option 1: cross-tenant synchronization (CTS) Target tenant Microsoft 365 global admin Source tenant Microsoft 365 global admin	As the target tenant admin, enable CTS in the target tenant As target tenant admin, enable autoredemption in the target tenant As the source tenant admin, enable autoredemption in the source tenant As the source tenant admin, set up CTS in the source tenant and test the connection to the target tenant As the source tenant admin, define who's in scope for provisioning and test on demand provisioning As the source tenant admin, start the provisioning job to sync users to the target tenant As target and source tenant admins, verify users in the target tenant and monitor the provisioning job
	Option 2: B2B collaboration Target tenant Microsoft 365 global admin Source tenant Microsoft 365 global admin	Optional: In the target and source tenants, confirm that autoredemption is selected in cross-tenant access settings As the target tenant admin, prepare a comma-separated value (.csv) file with user information As the target tenant admin, upload the file to Microsoft Entra ID As the target tenant admin, confirm that users are added to the directory

Import users from all tenants to the Glint app

To successfully access surveys and results, all users need to be imported to the Glint application, regardless of their home tenant. Glint offers two methods to import users:

	Import method roles involved	More information
	Secure File Transfer Protocol (SFTP) Viva Glint admin HR information system team	SFTP and data automation
	People page import Viva Glint admin	People page import in the Glint platform

Related resources

Cross-tenant access and multitenant organization:

• Cross-tenant access overview, especially the Important considerations section.
• Configure B2B collaboration cross-tenant access.
• Enable B2B external collaboration settings.
• Plan for multitenant organizations in Microsoft 365
• Configure a multitenant organization using PowerShell or Microsoft Graph API
• What is a multitenant organization in Microsoft Entra ID?
• Manage tenants in your Microsoft Customer Agreement billing account
• Multitenant organization scenario and Microsoft Entra capabilities
• Viva Glint for a multitenant organization FAQ

B2B collaboration:

• Configure cross-tenant access settings for B2B collaboration
• Bulk invite guest users for B2B collaboration
• B2B monthly active user (MAU) licensing

Cross-tenant synchronization:

• Configure cross-tenant synchronization
• Configure cross-tenant synchronization using PowerShell or Microsoft Graph API
• B2B monthly active user (MAU) licensing
• Cross-tenant synchronization licensing