Solution for guests accounts with an organisation account without Office365 tenant to be able to login at teams.microsoft.com

I have created several guest accounts following the instructions here:

https://docs.microsoft.com/en-us/microsoftteams/guest-access

Basically,

Enabled Guest Access in Office365 Admin Center

Added guest account through Azure Active Directory

a. Guest account received email Azure AD "You're invited to the organization"

b. Guest follows the "Get Started" link in the email to create a password

Added guest to a Team through Microsoft Teams desktop application

a. Guest account received email Teams "You have been added to a team in Microsoft Teams"

b. Guest follows the "Open Microsoft Teams" link in the email to be sent to teams.microsoft.com

c. Guest is redirected to login.microsoftonline.com
d. Guest logins in using email/password from #2b

e. Guest is redirected to the Teams page and is able to work.

When the Guest tries to login directly to Teams - either through teams.microsoft.com or the Teams desktop application - they are redirected first to a login page (login.microsoftonline.com), then after login to an error page:

https://teams.microsoft.com/_#/licenseError?errorCode=UserLicenseNotPresentForbidden

The Guest can still login/access Teams following the "Open Microsoft Teams" link in the #4b email.

Workaround

If the Guest adds the "tenantId" indicated in the #4b/Open Msft Teams email to the Teams URL, for example: https://teams.microsoft.com?tenantId=1234567-89ab-cdef-0123-456789abcdef

Guest is redirected to login.microsoftonline.com

Guest logs in using username/password

Guest is redirected back to https://teams.microsoft.com/_?tenantId=1234567-89ab-cdef-0123-456789abcdef

Guest can now access the Team (without the UserLicenseNotPresentForbidden error)

This workaround only works through the Browser - it does not work through the Teams Desktop App, as it is not possible to include the requisite "tenantId" to login. Using the Desktop App always fails with UserLicenseNotPresentForbidden.

When the Guest is logged in using the correct "tenantId", the Teams menu (in the Browser) looks like this:

microsoft-teams-menu.png

If the Guest clicks on the other account under "Your accounts" (abcdef-0123-4567-89ab-cdef012345), the Guest is redirected to the UserLicenseNotPresentForbidden error page.

microsoft-teams-userlicensenotpresent.png

It seems that a Guest has been assigned two different "tenantId"s (or Azure Object IDs), the first is the one created in step #2, the second is the one created in step #4. When the Guest tries to login without specifying the tenantId, login.microsoftonline.com defaults to the tenantId in #2 (which isn't authorized to access Teams).

I see no place in Teams, Office365 Admin Center, or Azure AD to manage these separate 'tenantId's or allow the Guest to login to Teams using the Desktop App.

134 votes

(thinking…)

Facebook

Google

Forgot password?

Create a password

Signed in as (Sign out)

We’ll send you updates on this idea

Jorik Polhuis shared this idea · Mar 30, 2018 · Flag idea as inappropriate… · Admin →

needs your feedback ·

Warren responded · May 1, 2018

If anyone is still hitting this issue, please respond in the comments section of this topic and let me know!

Thanks!
-Warren

54 comments

Add a comment…

Attach a File