Comments on: Comparing Azure AD Guest Accounts and Exchange Online Mail Contacts

By: Tony Redmond

Tony Redmond — Tue, 12 Sep 2023 10:11:42 +0000

In reply to Charlie. The existing guest account will be used...

By: Charlie

Charlie — Tue, 12 Sep 2023 10:09:42 +0000

I’ve just started at a small membership based org that is now 365 cloud-only.
I was asked to make the members of our ancient CRM appear as contacts so that Outlook users wouldn’t be copy/pasting all the time.

I saw this article and I prefer the idea of using Azure guests – partly because that seems like the future way, but also because about 25% of our members are already Azure guests because they take part in meetings / collaborate on files / etc and so are in AAD.

I have a nascent script that can dump the CRM members into AAD as guests, skipping those already there… based on your Contact conversion one … but I’m interested what might happen if one of these ‘new’ guests then is invited by email to share a file, or join a Team.
What happens when they find out they already have a guest account in our tenancy?

By: Patrick

Patrick — Fri, 08 Sep 2023 20:21:31 +0000

In reply to Tony Redmond. Thanks, Tony. I know this is a rare situation. We eventually can sync Contact as Guest account using ADConnect by playing rules for in from AD-User Join, in from AD-User Common and Out to AAD-User Join. Need set SourceObjectType to User and userType to Guest. We hope this conversion can resolve "Use not in directory" for Sharepoint external sharing login issue. But the conversion results in other login issues. So, we revert back to keep Contact in Azure AD. We see that, for an existing azure contact to be able to login SPS, the guest account needs to be invited from Azure AD once the contact gets the sharepoint login error. One Time Passcode is not enough since the guest account created from OTP login flow does not have proxy address.

By: Tony Redmond

Tony Redmond — Sun, 27 Aug 2023 11:39:02 +0000

In reply to Patrick. I don't believe you can sync contacts to guest accounts.

By: Patrick

Patrick — Sun, 27 Aug 2023 02:58:38 +0000

Can I use ADconnect to sync contact to Guest account in azure AD instead of Powershell? I tried to set SourceObjectType to User for Contact in In from AD – Contact rule and set userType to Guest in Out to AAD – User join rule(this rule probably is not right. It should be Contact join rule? Not see UserType under Contact rule), but not able to get it done. Metaverse search shows none SourceObjectType of contact is even changed to User. What is the missing part? Thanks!

By: Tony Redmond

Tony Redmond — Wed, 16 Aug 2023 17:35:17 +0000

In reply to Joerg. I don't think so. The email clients would have to know where to look to find the public keys...

By: Joerg

Joerg — Wed, 16 Aug 2023 15:08:48 +0000

Hello, I was wondering if it is possible to use guest accounts or mail contacts to set S/MIME public keys (userSMIMECertificate)? This would allow to centrally publish external users public keys for S/MIME encryption.

By: Comparing Azure AD Guest Accounts and Exchange Online Mail Contacts – blog by @12Knocksinna – 365forall

Thu, 02 Mar 2023 14:37:52 +0000

[…] Comparing Mail Contacts and Azure AD Guest Accounts (office365itpros.com) […]

By: Tony Redmond

Tony Redmond — Thu, 02 Mar 2023 10:13:43 +0000

In reply to F..

https://office365itpros.com/2022/08/11/get-associatedteam-cmdlet/

By: F.

F. — Thu, 02 Mar 2023 08:05:05 +0000

Good Morning, there is a simple way to check if a guest user for example Jef.Kazimer@contoso.com is present as Teams Member in various teams?