Skip to content

Commit 06ec21a

Browse files
authored
Merge pull request #86388 from linkhp/patch-18
Edits based on support investigation
2 parents 1b69c11 + 8e62813 commit 06ec21a

File tree

1 file changed

+12
-10
lines changed

1 file changed

+12
-10
lines changed

articles/active-directory/external-identities/redemption-experience.md

Lines changed: 12 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -61,17 +61,19 @@ When you add a guest user to your directory by [using the Azure portal](./b2b-qu
6161
4. The guest is guided through the [consent experience](#consent-experience-for-the-guest) described below.
6262

6363
## Redemption limitation with conflicting Contact object
64-
Sometimes the invited external guest user's email may conflict with an existing [Contact object](/graph/api/resources/contact), resulting in the guest user being created without a proxyAddress. This is a known limitation that prevents guest users from:
65-
- Redeeming an invitation through a direct link using [SAML/WS-Fed IdP](./direct-federation.md), [Microsoft Accounts](./microsoft-account.md), [Google Federation](./google-federation.md), or [Email One-Time Passcode](./one-time-passcode.md) accounts.
66-
- Redeeming an invitation through an invitation email redemption link using [SAML/WS-Fed IdP](./direct-federation.md) and [Email One-Time Passcode](./one-time-passcode.md) accounts.
67-
- Signing back into an application after redemption using [SAML/WS-Fed IdP](./direct-federation.md) and [Google Federation](./google-federation.md) accounts.
64+
Sometimes the invited external guest user's email may conflict with an existing [Contact object](/graph/api/resources/contact), resulting in the guest user being created without a proxyAddress. This is a known limitation that prevents guest users from redeeming an invitation through a direct link using [SAML/WS-Fed IdP](./direct-federation.md), [Microsoft Accounts](./microsoft-account.md), [Google Federation](./google-federation.md), or [Email One-Time Passcode](./one-time-passcode.md) accounts.
65+
66+
However, the following scenarios should continue to work:
67+
- Redeeming an invitation through an invitation email redemption link using [SAML/WS-Fed IdP](./direct-federation.md), [Email One-Time Passcode](./one-time-passcode.md), and [Google Federation](./google-federation.md) accounts.
68+
- Signing back into an application after redemption using [SAML/WS-Fed IdP](./direct-federation.md) and [Google Federation](./google-federation.md) accounts.
6869

6970
To unblock users who can't redeem an invitation due to a conflicting [Contact object](/graph/api/resources/contact), follow these steps:
70-
1. Delete the conflicting Contact object.
71-
2. Delete the guest user in the Azure portal (the user's "Invitation accepted" property should be in a pending state).
72-
3. Re-invite the guest user.
73-
4. Wait for the user to redeem invitation.
74-
5. Add the user's Contact email back into Exchange and any DLs they should be a part of.
71+
1. Delete the conflicting Contact object.
72+
2. Delete the guest user in the Azure portal (the user's "Invitation accepted" property should be in a pending state).
73+
3. Re-invite the guest user.
74+
4. Wait for the user to redeem invitation.
75+
5. Add the user's Contact email back into Exchange and any DLs they should be a part of.
76+
7577

7678
## Invitation redemption flow
7779

@@ -140,4 +142,4 @@ If you see an error that requires admin consent while accessing an application,
140142
- [Add Azure Active Directory B2B collaboration users in the Azure portal](add-users-administrator.md)
141143
- [How do information workers add B2B collaboration users to Azure Active Directory?](add-users-information-worker.md)
142144
- [Add Azure Active Directory B2B collaboration users by using PowerShell](customize-invitation-api.md#powershell)
143-
- [Leave an organization as a guest user](leave-the-organization.md)
145+
- [Leave an organization as a guest user](leave-the-organization.md)

0 commit comments

Comments
 (0)