Control which guests can sign in

If your Microsoft 365 tenant includes guests, such as partners, contractors or IT providers, you can now choose whether they can sign in to OneDirectory.

Where to find it
Members & Roles is now called Access, and the new guest policy lives there. Choose from:

• Allow all guests
• Allow guests from specific domains: enter the domains you trust, and we'll suggest the ones your guests actually sign in from
• Don't allow guests

Domains must match exactly, so subdomains need their own entry.

Good to know

• Signing in and appearing in the directory are separate. Whether guests show up in your directory is still controlled by your filtering rules under Data Sources. You can hide a guest from the directory but let them sign in, or the reverse.
• The policy applies to profiles with the type Guest. If you've changed someone's profile type to Person, they can sign in regardless of this setting.
• Blocked guests see a clear explanation, with the option to sign in with their own company account instead.