Hi ,
Welcome to the Support Portal. How can we help?

Guest Users

Table of Contents



When working with external parties, it can be useful when they have easy access to certain information, applications and shared documents. That is why we allow you to give external users access to the workspace with an Azure Guest account. This way, they can also stay up to date on information, processes and changes and work in the same documents, even at the same time, just like you do with your colleagues. This way, you simplify working with external parties.



Azure Guest account

To accomplish this, you need to modify the SSO properties within Azure AD.

  • Sign into the Azure Portal
  • Go to App registrations.
  • Select your Workspace SSO App Registration.
  • Select Manifest.
  • Look for the "optionalClaims": null, rule.


  • Replace it with:
"optionalClaims": { "idToken": [ { "name": "upn", "essential": false, "additionalProperties": ["include_externally_authenticated_upn"] } ] },


  • Click Save.
  • To import guest users from AAD, the Azure AD synctool version 2.3.0 or higher is needed. You can find it in the downloads section.
Bear in mind the following: when a Guest User is imported to Workspace, the correct permissions for applications are not automatically assigned to the user. For example: if you want to give access to the Documents app, access must be granted in SharePoint under the site permissions. Click here for more information.

Back to top