How many ways are there to onboard Guest accounts in Entra ID?

Rory Braybrook
The new control plane
2 min readMar 25, 2024
Image of guest users
Generated by Copilot

I’ve been writing some posts about guest accounts and wondered how many ways there were to do this.

So I started documenting them 😄

1) Via inviting a user from the User tab in the portal:

Image showing “Invite external user”

This sends an invitation to the guest user via email.

There is a quick start for this.

Note that you can do this from the Entra ID portal and the Entra External ID portal.

You cannot do this from the Azure AD B2C portal because adding a guest user there creates another admin. user for the portal; not another user.

2) Via the bulk invite feature via uploading a csv file:

Image showing “Bulk invite”

This is just doing 1) in bulk.

3) Via an invite to Azure DevOps / Teams / Github

Image showing “Add users”

4) Via Microsoft Graph to send the user an invitation:

Use this API to create a new invitation. The invitation adds an external user to the organization.

5) Via Entra External ID user self sign up:

Image showing “No account? Create one”

As per the link above:

Note that in Entra External ID (B2B), both ways create guest accounts, but in Entra External ID (CIAM) (B2C), only the invite creates a guest account.

6) From entitlement management via a link to MyAccess:

Image showing “MyAccess portal link”

7) Via a guest onboarding flow with a Verified ID “Verified Employee” VC:

Image showing “Guest onboarding” tab

Thanks to @Luke and @Daniel for their input.

Have I missed any? Please add in the comments.

All good!

--

--

Rory Braybrook
The new control plane

NZ Microsoft Identity dude and MVP. Azure AD/B2C/ADFS/Auth0/identityserver. StackOverflow: https://bit.ly/2XU4yvJ Presentations: http://bit.ly/334ZPt5