During authentication, Azure AD will check a user’s credentials for a claim that the user has completed MFA. Trust multi-factor authentication from Azure AD tenants:Īllow Conditional Access policies to trust MFA claims from external organizations.Next to the added organization, click on the Inherited from default link below Inbound access.Enter the tenant FQDN og tenant ID of the external partner (example: ) and click Add.

Under the Organizational settings blade click +Add organization.

Now select Cross-tenant access settings.

In the Manage section, select External Identities.

Open the Azure portal, and select Azure Active Directory.

How to configure trust settings in Azure AD: This configuration ensures that B2B direct connect users from the external organization are compliant with your Conditional Access policies, and can provide a more seamless user experience.

If you want to allow B2B direct connect with an external organization and your Conditional Access policies require MFA, you must configure your inbound trust settings so your Conditional Access policies will accept MFA claims from the external organization. Azure Active Directory offers the ability to trust MFA and device compliance claims from other Azure AD tenants.Įnabling MFA trust with another tenant streamlines the sign-in process for B2B collaboration users and enables access for B2B direct connect users.

Mfa conditional access