7 thoughts on “Partner Access License (PAL) wrangling for SharePoint Online.

  1. […] I previously blogged on PAL licenses and Office 365, you will start to have login challenges once you start exposing your Azure AD and (typically) […]

  2. Patrick Parker says:

    I was trying something similar but receiving the error page you show. I had created a new Azure AD, created a test user, and then added this Azure AD user to my Office 365 Azure AD. I was then able to add this external Azure AD user to a group in SharePoint but unable to login to the site. Any ideas on whether my scenario is supported – Tks in advance.

    Patrick

    • Simon says:

      Patrick – Azure AD isn’t treated as an external user – it would be treated as an organisational account by Office 365 and you would most likely get the login failure screen because the user was not found in the directory associated with your O365 subscription. Today there isn’t the ability to invite users from other organisations that are using Azure AD / Office 365 – all PAL users must have a Microsoft Account (Live ID) which is the only way to add them. Hope this helps.

  3. Patrick Parker says:

    Thanks!

  4. Patrick Parker says:

    Another thing that I noticed in my testing was that you can add unlicensed Office 365 users to your SharePoint site and they are able to login. I saw an article about this online but it didn’t mention if this violated the licensing agreement if the unlicensed users were partners and not employees. Wondering if this is an alternative solution for external partner users.

    • Simon says:

      Patrick – while that scenario may work, I think (as you highlighted) that it would be against the terms of the licensing you are using. There’s also a clear risk that at any time those users could have access removed – something much less likely to occur with PALs. I’m sure we’ll see changes to how external sharing occurs in the SharePoint Online space so keep an eye out!

  5. […] non-Azure AD accounts early on by having users create MSAs with logins matching Work Accounts. As I previously blogged about, it isn’t always possible to do this, but if you organisation has then you’re in a good […]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: