Status	Pending Stakeholder Review
Owner	Gautier Todoschini
Stakeholders	James Kyndt, John Donovan, Frank Bolata, Boris Foiselle

Issue

Recommendation

Background & Context

Microsoft Entra (formerly Azure Active Directory) offers robust Business-to-Business (B2B) collaboration features, enabling organizations to securely work with external partners, suppliers, vendors, and customers. Here’s what it provides:

1. Secure External Collaboration

Invite External Users: Organizations can invite users from any domain (e.g., partners, suppliers) to access specific resources, apps, or services.
Flexible Identity Options: External users can sign in with their own credentials (Microsoft, Google, or other email accounts), reducing friction and improving user experience.

2. Granular Access Management

Conditional Access Policies: Apply security policies (like MFA, location-based access, or device compliance) to external users, just as you would for internal users.
Role-Based Access Control (RBAC): Assign precise permissions to external users, ensuring they only access what’s necessary.

3. Seamless Integration

Single Sign-On (SSO): External users can access shared apps and resources without needing to remember new passwords.
Collaboration Across Tenants: Enables cross-organization collaboration in Microsoft Teams, SharePoint, and other Microsoft 365 services.

4. Lifecycle Management

Automated User Provisioning/Deprovisioning: Easily add or remove external users as business relationships change.
Self-Service Capabilities: External users can manage their own profiles and reset passwords if needed.

5. Compliance and Security

Audit Logs and Monitoring: Track external user activities for compliance and security purposes.
Privacy Controls: Organizations retain control over their data and can enforce privacy requirements.

Assumptions

Constraints

Impacts

Business Rules

Options considered

Evaluation

Technical Feasibility
User Impact
Support Impact
Operational Complexity
Cost