Skip to content
← Back to the guide

Cross-Tenant Access Settings design

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 4

Cross-Tenant Access Settings design

How to design Cross-Tenant Access Settings (CTAS) — the foundational trust controls for B2B and cross-tenant collaboration.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/cross-tenant-access-settings-design

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 4
01

What are cross-tenant access settings in Entra ID?

Per-partner-tenant controls for B2B collaboration and B2B direct connect: whether your users can be invited to a partner tenant and vice versa, which users and apps are allowed, and whether you trust the partner's MFA a…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/cross-tenant-access-settings-design

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 4
02

Should I trust MFA from partner tenants?

For known partners with a comparable security bar, yes — trusting their MFA and compliant-device claims removes the double MFA that drives guests to workarounds. For unknown tenants, leave defaults untrusted so your Con…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/cross-tenant-access-settings-design

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 4
03

What is the difference between B2B collaboration and B2B direct connect?

B2B collaboration creates a guest object in your tenant; the user is a guest you manage. B2B direct connect has no guest object: users stay in their home tenant and access shared channels in Teams through a trust config…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/cross-tenant-access-settings-design

Slide 4Download PNG

Auto-generated from Cross-Tenant Access Settings design. This page is not indexed and isn't part of the guide itself.