You need to ensure that only users from litwareinc.com can be added to Teams as guest users. To complete this task, sign in to the Microsoft 365 portal.

Question

Explanation

This question tests your ability to configure Azure Active Directory (Entra ID) External Collaboration Settings to restrict Teams guest user invitations to a specific domain. The correct approach uses the Microsoft 365 Admin Center or Azure AD portal to enforce an allowlist of permitted guest domains.

Approach. Sign in to the Microsoft 365 portal (portal.microsoft.com), then navigate to Azure Active Directory (Microsoft Entra ID) > External Identities > External collaboration settings. Under 'Collaboration restrictions', select 'Allow invitations only to the specified domains (most restrictive)' and enter 'litwareinc.com' in the allowed domains list, then save. This allowlist policy ensures that guest invitations can only be sent to - and accepted by - users whose email addresses belong to litwareinc.com, blocking all other external domains from being added as guests in Teams.

Concept tested. Azure AD / Microsoft Entra ID External Collaboration Settings - specifically configuring domain-based B2B guest invitation restrictions (allowlist) to control which external domains can be invited as guest users into Microsoft Teams and the broader Microsoft 365 tenant.

Reference. Microsoft Learn: 'Allow or block invitations to B2B users from specific organizations' - docs.microsoft.com/en-us/azure/active-directory/external-identities/allow-deny-list

No community discussion yet for this question.