This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 28.000000000000004%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
We have several use cases where our staff and customers both need to log in to the same applications for eg booking a meeting room, ordering catering etc. If we set up an external tenant in Entra, will our staff users (who are in the main tenant) be federated into that external tenant too, as is possible with ADB2C? Some of the applications we use are third party and will only allow us one integration with Entra, so it is important we can get the staff and customers to authenticate via a single endpoint.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 45%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAV%3C/text%3E%3C/svg%3E)
Thank you for reaching Microsoft Q&A!
I understand that you are looking for a way to allow both your staff and customers to log in to the same applications using a single endpoint.
If you want to enable your employees to collaborate with business partners and guests, use External ID for B2B collaboration. Allow secure access to your enterprise apps through invitation or self-service sign-up. Determine the level of access guests have to the Microsoft Entra tenant that contains your employees and organizational resources, which is a tenant in a workforce configuration.
For more information, please go through Introduction to Microsoft Entra External ID
B2B collaboration with external guests for your workforce
Hope this helps. Do let us know if you any further queries by responding in the comments section.
Thanks,
Akhilesh.
If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Hi @Paul McCarthy
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Akhilesh - thank you very much for your reply. My main concern with using B2B would be that we can't guarantee that all customers will have a Microsoft account, so we will need to allow for guest access with eg gmail accounts. Customers will be a mixture of corporates and individuals.
Hi @Paul McCarthy
Azure AD B2B collaboration allows external users to sign in using their preferred identity, including their Azure AD account, consumer Microsoft account, or a social identity you enable such as Google. With B2B collaboration, you can let external users sign in to your Microsoft applications, SaaS apps, custom-developed apps, and so on. So, you can allow guest access with Gmail accounts or other social identities.
If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
@Paul McCarthy
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.