Under Identity, enter the email address of the external user. Select New user, and then select Invite external user. In the left menu, under Manage, select Users. In the Azure portal, select Azure Active Directory. Sign in to the Azure portal as an Azure AD administrator. If you don't know how to create a guest account, see Add a B2B guest user in the Azure portal. A valid external email account that you can add to your tenant directory as a guest user and use to sign in.MFA policies are always enforced at your organization, regardless of whether the partner has MFA capabilities. To enforce MFA, you need to create an Azure AD Conditional Access policy. Access to Azure AD Premium edition, which includes Conditional Access policy capabilities.To complete the scenario in this tutorial, you need: If you don’t have an Azure subscription, create a free account before you begin.

Use the What If tool to simulate MFA sign-in.

In this tutorial, we’ll use the Microsoft Azure Management app to illustrate the process.

Create a Conditional Access policy that requires MFA for access to a cloud app in your environment.

Test the sign-in experience before MFA setup.

The user is allowed access to the application.

The user sets up MFA with Company A and chooses their MFA option.

The user is asked to complete an MFA challenge.

The guest user signs in with their own work, school, or social identity.

An admin or employee at Company A invites a guest user to use a cloud or on-premises application that is configured to require MFA for access.

The resource tenant is always responsible for Azure AD Multi-Factor Authentication for users, even if the guest user’s organization has Multi-Factor Authentication capabilities. MFA policies can be enforced at the tenant, app, or individual guest user level, the same way that they're enabled for members of your own organization. In Azure Active Directory (Azure AD), you can accomplish this goal with a Conditional Access policy that requires MFA for access. Then external users will need more than just a user name and password to access your resources.

When collaborating with external B2B guest users, it’s a good idea to protect your apps with multi-factor authentication (MFA) policies.

Azure b2c mfa