Hey everyone! I'm looking for some advice on creating guest users in our system, which we typically do on a temporary basis. We're currently using MFA for our main setup, but I want to know if there's a good way to disable MFA for these temporary guest users after October 1st. Any suggestions or best practices?
1 Answer
We usually let team owners invite guests and then regularly clean up old guest accounts based on their activity. Guests receive an email asking if they still need access, and the team owner gets a message to confirm. If both say yes, they stay; if either says no or doesn't respond, they're removed. Just remember, disabling MFA for guests can be risky! Instead of disabling it, consider using B2B. It allows trust between tenants without disabling MFA, but be sure the guest’s tenant meets your security standards.
Are you using entitlement management or is this a custom solution? I'm curious about the email process you mentioned.