Question

Contoso uses Entra ID entitlement management to grant partner employees access to a collaboration catalog. A new partner, Fabrikam, uses its own Entra tenant. You must configure an access package so that only users from Fabrikam's verified domain can request access, and their accounts should be automatically created as B2B guests upon approval. You have already created the access package and its resources. What must you configure so that Fabrikam users are recognized as an approved external source and can submit requests?

Accepted Answer

Add Fabrikam as a connected organization, then create an access package assignment policy that allows 'Users not in your directory' scoped to that connected organization.

Answer

Create a dynamic guest group based on Fabrikam's domain and add it as the requestor scope in the assignment policy.

Answer

Enable a cross-tenant synchronization job with Fabrikam so their users are provisioned before requesting the access package.

Answer

Configure a SAML federation with Fabrikam's identity provider and add the domain to allowed external collaboration domains.