Welcoming guests into your organization's digital space should be as seamless as greeting them at...
Welcoming guests into your organization's digital space should be as seamless as checking into an exclusive hotel. Following our previous article on setting up access packages with Microsoft Entra ID Identity Governance, this guide will show your guests how to accept these packages efficiently and securely. By the end of this tutorial, your guests will be able to onboard themselves, access the necessary resources, and enjoy a smooth and professional onboarding experience. Stay tuned as we walk through each step with detailed instructions to ensure a hassle-free process.
Step 1: Receiving and Accepting the Invitation
Our partner organization sends us an access package link as well as some information regarding what type of access the link is providing, how long access will last, etc. Once we have the access package link, we need to go through the initial sign up process. This journey begins with clicking on the URL that was provided by our partner. Accessing the URL takes us to the MyAccess portal, where we can manage different access packages assigned to us. In the MyAccess portal we can request the access package, or extend our access if our partner has allowed extensions. The URL will take us straight into the request screen for the access package.
Step 2: Signing In
We will be prompted to enter business justification for accepting the access package. If not required by the partner organization, it can be skipped. Lastly, we will be informed that we are sharing our name, email, and other account details necessary to provide access with our partner. Now that we have accepted the access package, it can take 5-10 minutes for our access to provision depending on what resources we were given access to. If our partner provided any information on how to directly access what we need, we can follow their instructions now. If not, we can explore what access has been granted by going to My Apps or My Groups from the top menu.
We will be prompted to allow our partner access to the details of our account that was mentioned earlier. Inspect the prompt and ensure it comes from the organization we are expecting! It is normal to see our partners "onmicrosoft.com" domain name here.
Step 3: Accessing Resources
Once we accept this prompt, we may be prompted to setup MFA in our partner's organization. This will depend on how our partner has configured the access package, as well as their own sign-on security. In some cases, we may need to reach out to our partner at this point and have them assist us setting up MFA. If we are getting a message that says something similar to: "Your sign-on was successful but you cannot reach this resource" it is likely because we don't have MFA setup on our guest account within our partner organization. Once our login is successful, we will be able to easily access all the resources assigned to us by our partner.
Conclusion
Congratulations! By following these steps, you've successfully navigated the process of accepting an access package in Microsoft Entra ID Identity Governance. This streamlined onboarding ensures you have the necessary access to resources while maintaining security. If you encounter any issues or have questions, don’t hesitate to reach out for support. Enjoy seamless access and a smooth start in your new digital environment!
