Skip to content

Commit 94d8f29

Browse files
authored
Update Set-CsTenantFederationConfiguration.md
Updating reliance on AllowFederatedUsers
1 parent 08cebb6 commit 94d8f29

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

teams/teams-ps/MicrosoftTeams/Set-CsTenantFederationConfiguration.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -234,7 +234,7 @@ If the `New-CsEdgeAllowList` cmdlet is used then users can only communicate with
234234
Note that string values cannot be passed directly to the AllowedDomains parameter.
235235
Instead, you must create an object reference using the `New-CsEdgeAllowList` cmdlet or the `New-CsEdgeAllowAllKnownDomains` cmdlet and then use the object reference variable as the parameter value.
236236

237-
The AllowedDomains parameter can support up to 4,000 domains.
237+
The AllowedDomains parameter can support up to 4,000 domains. Please note that the property AllowFederatedUsers must be set to True for values under AllowedDomains to be considered.
238238

239239
```yaml
240240
Type: Boolean
@@ -294,7 +294,9 @@ Accept wildcard characters: False
294294
> Applicable: Microsoft Teams
295295

296296
When set to True (the default value) users will be potentially allowed to communicate with users from other domains.
297-
If this property is set to False then users cannot communicate with users from other domains regardless of the values assigned to the AllowedDomains and BlockedDomains properties.
297+
If this property is set to False then users cannot communicate with users from other domains, regardless of the values assigned to the AllowedDomains and BlockedDomains properties or any instances of the ExternalAccessPolicy. In effect, the AllowFederatedUsers property serves as a master switch that globally enables or disables federation across the Tenant, overridding all other policy settings.
298+
299+
To block all domains while selectively allowing specific users to communicate externally via explicit ExternalAccessPolicy instances, set AllowFederatedUsers to True and leave the AllowedDomains property empty.
298300

299301
```yaml
300302
Type: Boolean

0 commit comments

Comments
 (0)