Identity
Microsoft Entra External ID
External collaboration identities and B2B guest access.
Key points
- Supports collaboration with identities whose home organization is outside the resource tenant.
- A B2B guest has an object in the resource tenant and remains governed by that tenant’s access policy.
- Invitation and redemption establish the identity relationship but do not grant application or resource access automatically.
Best-known use cases
- Invite a partner to a governed application.
- Review and remove stale external collaborators.
What candidates often confuse it with
- Guest vs member: externally sourced collaboration identity vs identity ordinarily managed for the tenant.
- Invitation vs authorization: establish a directory identity vs grant access to a target.
Key takeaway
Use External ID for governed partner collaboration without creating an unmanaged internal account.
Related services
- Microsoft Entra ID
- Self-service password reset
Relevant exam tasks
- D1.1.S1 — Create users and groups
- D1.1.S2 — Manage user and group properties
- D1.1.S3 — Manage licenses in Microsoft Entra ID
- D1.1.S4 — Manage external users
- D1.1.S5 — Configure self-service password reset (SSPR)