azure-active-directorypassport-azure-ad

Azure Active Directory PIM with guest users

We have company giving us managed support for our azure subscription?

  1. Can we enable MFA for them as well i.e for guest accounts?

  2. Is AzureAD PIM works for external users i.e guest accounts?

Solution

    1. Yes. It's best practice to enforce MFA for guest users.

    2. Yes, you can assign PIM roles for guest users and use PIM for assigning access to Azure resources.