You need to resolve the issue of the guest user invitations. What should you do for the Azure AD tenant?

The "External collaboration settings" in Azure Active Directory (Azure AD) provide the central administrative controls for managing how guest users are invited into the tenant. These settings determine who can invite guests (administrators, members, or specific roles), whether guest self-service sign-up is enabled, and any domain-specific restrictions (allow or deny lists) for invitations. Therefore, to resolve an issue with guest user invitations, such as invitations failing or being blocked, the first and most direct place to investigate and configure is the External collaboration settings.

A. Configure the Continuous access evaluation settings.

Continuous Access Evaluation (CAE) revokes access tokens in near real-time based on critical events. It governs active sessions, not the initial user invitation process.

C. Configure the Access reviews settings.

Access reviews are a governance feature used to periodically review and manage existing user access to resources. They do not control the initial invitation of guest users.

D. Configure a Conditional Access policy.

Conditional Access policies enforce controls like multi-factor authentication during sign-in, after a user has been successfully invited and is attempting to access resources. They do not manage the invitation process itself.

1. Microsoft Learn. "Configure external collaboration settings." Microsoft Entra documentation. Accessed October 2023. In this document

under the "Guest invite settings" section

it explicitly details the policies for controlling guest user invitations

such as "Guest invite restrictions" and "Allow or block domains." This is the primary location for resolving invitation issues.

2. Microsoft Learn. "Conditional Access for B2B collaboration users." Microsoft Entra documentation. Accessed October 2023. This page clarifies that Conditional Access policies are applied to B2B guest users "when they access a resource in a resource tenant

" which occurs after the invitation has been accepted.

3. Microsoft Learn. "What are Azure AD access reviews?" Microsoft Entra documentation. Accessed October 2023. The overview states

"Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships

access to enterprise applications

and role assignments

" confirming its role in managing existing access

not invitations.

4. Microsoft Learn. "Continuous access evaluation." Microsoft Entra documentation. Accessed October 2023. The introduction explains that CAE is for revoking access tokens based on "critical events and policy evaluation

" which relates to post-authentication session management

not the invitation workflow.