Permission & Access Issues

Fix SharePoint External Users Not Created in Azure AD

Khadija Khan Oct 21, 2026 868 views

Question details

External users invited to a SharePoint site are not automatically generated as guest users, triggering a 'user does not exist in tenant' error.

Fix SharePoint External Users Not Created in Azure AD

Product: Microsoft SharePoint / Azure AD
Device & OS: not provided
Scenario: An internal user attempts to share a SharePoint site or document with an external user.
Observed behavior: The invited external user receives an error stating they do not exist in the tenant, preventing access to the shared SharePoint resources.

Before you start

You will need Microsoft 365 Global Administrator or Azure AD Administrator permissions to modify tenant-level external collaboration settings and enable B2B integration.

Solution 1Recommended

Enable Azure AD B2B Integration for SharePoint and OneDrive

Ensure that the Azure AD B2B external collaboration settings are configured to allow guest invitations and that SharePoint is properly integrated.

Sharing in Microsoft 365 is governed by B2B external collaboration settings in Azure AD. If guest sharing is restricted here, it overrides any sharing settings configured directly within SharePoint.

Check Azure AD External Collaboration Settings

Sign in to the Azure portal as an administrator. Navigate to Azure Active Directory > External Identities > External collaboration settings. Ensure that guest user permissions are configured to allow invitations.

Verify Organization-Level SharePoint Sharing

Open the Microsoft 365 Admin Center, go to the SharePoint admin center, and select 'Policies' > 'Sharing'. Verify that the external sharing slider for SharePoint is set to 'Anyone' or 'New and existing guests'.

Enable Integration via PowerShell

Open the SharePoint Online Management Shell. Run 'Connect-SPOService -Url https://[yourtenant]-admin.sharepoint.com' to connect. Then, run the command 'Set-SPOTenant -EnableAzureADB2BIntegration $true' to force external sharing to use Azure AD B2B.

Enable Azure AD B2B Integration for SharePoint and OneDrive

Propagation Time: Changes to tenant-level sharing policies and Azure AD integration settings may take several hours to fully propagate across all Microsoft 365 services.

Solution 2

Verify Site-Level Sharing Configurations

If organization-level settings are correct, ensure the specific SharePoint site has not been restricted from inviting external guests.

Free Microsoft Office alternative

Simplify Document Sharing and Collaboration with WPS Office

While resolving Azure AD and SharePoint tenant permissions can be a complex administrative task, WPS Office offers a straightforward, standalone alternative for document editing and sharing. It provides easy link-based sharing without requiring intricate tenant configurations or guest directory management.

Highly compatible with Microsoft Office formats (DOCX, XLSX, PPTX).Built-in cloud sharing for simple, link-based external collaboration.No complex tenant or Active Directory management required to share files.Free to download and use with an intuitive, tabbed user interface.

microsoft office alternative - wps office

Frequently Asked Questions

Why do external users get a 'user does not exist in tenant' error?

This happens when Azure AD B2B integration is disabled or restricted. Because the integration is blocked, the system cannot automatically create a guest profile in your organization's directory when the external user tries to access the shared link.

Do I need Azure B2B integration to share sites with work or school accounts?

Yes, Microsoft 365 now heavily relies on Azure AD B2B integration to authenticate and manage external guests securely, even if the invited user has their own Microsoft work or school account in a different tenant.

Can a standard user fix the Azure AD guest creation issue?

No. Modifying Azure AD external collaboration settings and SharePoint organization-level sharing policies requires administrative privileges (such as a Global Admin or SharePoint Admin role).

How can I check if Azure AD B2B integration is currently enabled?

An administrator can check this by opening the SharePoint Online Management Shell, connecting to the tenant, and running the `Get-SPOTenant` command. Look for the `EnableAzureADB2BIntegration` property to see if it is set to True.

Document & File Issues