Conditional Access authentication strengths for guests
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit a7e4516 · +1 −1 lines · also on GitHub
⋯ 21 unchanged lines
2222
In external user scenarios, the MFA authentication methods that a resource tenant can accept vary depending on whether the user is completing MFA in their home tenant or in the resource tenant. For details, see [Authentication strength for external users](/entra/identity/authentication/concept-authentication-strength-external-users).
2323
2424
> [!NOTE]
25
−> Currently, you can only apply authentication strength policies to external users who authenticate with Microsoft Entra ID. For email one-time passcode, SAML/WS-Fed, and Google federation users, use the [MFA grant control](concept-conditional-access-grant.md#require-multifactor-authentication) to require MFA.
25
+> Currently, you can only apply authentication strength policies to external users who authenticate with Microsoft Entra ID. For email one-time passcode, SAML/WS-Fed, Google federation, and Microsoft personal (MSA) users, use the [MFA grant control](concept-conditional-access-grant.md#require-multifactor-authentication) to require MFA.
2626
2727
## Configure cross-tenant access settings to trust MFA
2828
⋯ 42 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:13 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.