Microsoft enforcing "SharePoint and OneDrive integration with Microsoft Entra B2B"

[robintech]

Frequently Asked Questions: Improvements to external sharing in OneDrive and SharePoint - SharePoint in Microsoft 365 | Microsoft Learn

Microsoft Entra B2B integration for SharePoint & OneDrive - SharePoint in Microsoft 365 | Microsoft Learn

Quote

Starting May 2026, Microsoft enables SharePoint and OneDrive integration with Microsoft Entra B2B for all tenants, regardless of the tenant's setting for EnableAzureB2BIntegration

 

Quote

Can I opt out of this change?

No. This change applies to all tenants and aligns with Microsoft's strategy of using one centralized identity provider across all Microsoft 365 applications.

Can I choose when this integration is enabled for my tenant?

No. Tenants are selected automatically by our rollout systems. You cannot choose a specific date.

Didn't notice this until staff stopped being able to share documents with parents but our tenancy has been switched over to using Entra share permissions instead of Onedrive/Sharepoint admin, decided to add a Security group with "Guest inviter" permissions on Entra and adding staff to that and left it on " Only users assigned to specific admin roles can invite guests" for Entra , existing shared files don't seem to be affected

 

"Sharing failed: Please configure B2B collaboration settings correctly and troubleshoot first, "https://aka.ms/b2b-troubleshoot**". Error from Entra B2B: At least one invitation failed. Error: ResponseStatusNotOK, message: Guest invitations not allowed for your company. Contact your company administrator for more details.."

 

[psydii]

Did you figure this out? We are getting really inconsistent behaviour. I believe we're all set up that only people with the guest invitors role can share externally, yet for some users "it just works", even though they do not have the guest invitor role....  the guest account is provisioned and the guest can access?!

 

How are people feeling about this? One thing I don't think happened on the old way was access to document version history...  The other is a reticence by external users to "allow access to profile and usage data"... which as far as I can tell just means "we get to see what we'd see if we hadn't told you we were seeing it since that dawn of time"  but its scaring people off...

 

 

[robintech]

@psydii Seems to work ok with the Entra security group and guest inviter permissions or its inconsistent and working despite that but nobody has raised a ticket yet 

[APMerry]

Just trying to get my head around this. The problem I'm having is you don't seem to be able to set the OneDrive sharing permissions to be more permissive than sharepoint. Ideally I want people to be able to share from their own onedrives, not from sharepoint. Like it was before they made this change.

 

Feels like a backwards step in terms of security.

[psydii]

@APMerry yeah, really not sure how it works. Feels to me like its colliding with a config we made a decade ago to try to get it to work the way it is not supposed to.  Superficially we're configured to only allow those with the guest inviter roles to invite guests, (which you get via a specific group membership) yet I'm seeing loads of staff (who are not in that group) being the sponsors for guest since June.

 

I'm also seeing only about 5% of invitees actually being able to understand how to sign in to get to the files to which they have been invited, and no sane way of auditing who has been granted access to what.