Created by Claude - please verify

External identity providers - social IdPs, SAML/WS-Fed direct federation, email OTP and the issuers guests actually use.

Required Microsoft Graph permissions

IdentityProvider.Read.All Policy.Read.All User.Read.All — application permissions, granted to the app registration with admin consent.

Licence: None.

Endpoints: GET /v1.0/identity/identityProviders · GET /v1.0/directory/federationConfigurations/graph.samlOrWsFedExternalDomainFederation · GET /v1.0/policies/authenticationMethodsPolicy/authenticationMethodConfigurations/Email · GET /v1.0/users?$filter=userType eq 'Guest'&$select=identities

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

B2B Identity Providers & One-time Passcode

Guests do not always sign in with an Entra account. Google and Facebook accounts, a partner's own SAML IdP, or a one-time code sent by e-mail are all possible - each an external trust with its own MFA and lifecycle. This report lists every configured provider and how many guests use it.