Conditional Access Problems

Fix External User Prompted for Microsoft Authenticator in SharePoint

Maira Mehtab Sep 24, 2026 869 views

Question details

An external viewer is unable to open a shared SharePoint video and is instead prompted to install the Microsoft Authenticator app, even though the sharing link was set to "Anyone with the link".

Product: Microsoft SharePoint
Device & OS: not provided
Scenario: Sharing a video or document link with external users who do not have an account in the organization's tenant.
Observed behavior: The external user's access is blocked by an unexpected prompt requiring them to install Microsoft Authenticator for multifactor authentication.

Before you start

You will need Global Administrator or Conditional Access Administrator privileges in the Microsoft 365 tenant to view and modify security policies.

Solution 1Recommended

Review and Adjust Conditional Access Policies

Identify and modify the tenant security policies that are enforcing multifactor authentication for guest or external users.

In Microsoft 365, tenant-wide Conditional Access policies can override individual SharePoint sharing link settings. If a policy requires MFA for all users—including external or guest users—they will be prompted to use Microsoft Authenticator.

To resolve this, an administrator must exclude external users from the strict MFA policy or create a specific policy exception for SharePoint access.

Sign in to Microsoft Entra admin center

Go to the Microsoft Entra admin center (formerly Azure Active Directory) and log in with your administrator credentials.

Navigate to Conditional Access

In the left-hand menu, expand 'Protection' and click on 'Conditional Access', then select 'Policies'.

Identify the blocking policy

Review the list of active policies to find the one enforcing Multifactor Authentication (MFA). Check the 'Users' assignment to see if it applies to 'All users' or 'Guest or external users'.

Add an exclusion for external users

Open the policy, go to the 'Users' section, click the 'Exclude' tab, and select 'Guest or external users'. Save the policy to allow external viewers to bypass the Microsoft Authenticator prompt.

Security Defaults: If your tenant has 'Security Defaults' enabled instead of custom Conditional Access policies, MFA is automatically enforced for everyone. You may need to disable Security Defaults to use granular Conditional Access policies.

Free Microsoft Office alternative

Looking for a Hassle-Free Way to Share Documents?

Managing complex tenant policies and external access in Microsoft 365 can be time-consuming. If you need a straightforward way to create and share files without restrictive authentication loops, consider WPS Office.

1. Download the software: Visit the official WPS Office website and download the free installer.
2. Install WPS Office: Run the setup file and follow the quick on-screen instructions to complete the installation.
3. Create and share instantly: Open WPS Office, create your documents, and easily share them without worrying about complex tenant MFA policies.

Highly compatible with Microsoft Office formats (.docx, .xlsx, .pptx).Easy file sharing without complex tenant conditional access setups.Lightweight installation with a familiar, user-friendly interface.Completely free core features for everyday document and presentation needs.

microsoft office alternative - wps office

Frequently Asked Questions

Why does an 'Anyone with the link' SharePoint file ask for authentication?

This occurs when your organization's Microsoft 365 Conditional Access policies or Azure AD Security Defaults override SharePoint's sharing settings, forcing an extra layer of security (MFA) even on supposedly anonymous public links.

Can I bypass the Microsoft Authenticator prompt as an external user?

Generally, no. If the host organization's security policy requires MFA, external users must either comply and install the authenticator app or ask the sender to have their IT administrator adjust the access rules.

How do I share a SharePoint video without requiring MFA?

A tenant administrator needs to configure a Conditional Access policy exception that exempts 'Guest or external users' from MFA when accessing specific SharePoint sites, or adjust the Azure AD B2B collaboration settings.

Microsoft Office Security Issues