REDDIT 原始帖子

How to remove a guest organization if the other side blocked my account?

Stuck in an M365 loop. An external admin set my B2B guest account to "Block sign-in" (I no longer work with them). The organization is now a permanent zombie in my M365 profile backend. The Problem I cannot leave the organization myself Login fails instantly…

原帖正文r/sysadmin

Stuck in an M365 loop. An external admin set my B2B guest account to "Block sign-in" (I no longer work with them). The organization is now a permanent zombie in my M365 profile backend. The Problem I cannot leave the organization myself Login fails instantly because my account is blocked Clearing browser data doesn't fix it; the entry just resyncs from the cloud My Question If I contact their IT: Is it enough if the external admin simply DELETES my guest object from their Entra ID? Will that automatically purge the tenant from my M365 profile backend? Or am I still required to manually "leave" on my end even after they delete me (which I cannot do)? I'm really not a fan of a foreign organization being connected to my tenant like this. Even if Microsoft claims it's secure ... who actually believes that? Nevertheless, that's IMHO a major design flaw. (Note: Since I am not a native speaker, I translated/polished this post with the help of an AI.)

已收录讨论

8 条评论

u/Tronerz

https://learn.microsoft.com/en-us/entra/external-id/leave-the-organization You should be able to leave from the My Account -> Organisations page. https://myaccount.microsoft.com/ If not, then yes their IT can delete your user object from their Entra ID

u/anonRexusOP

Thanks for your answer! Yes, I tried this but the problem ist, that my account is blocked from sign-in – and I need to sign-in to leave an org. I can't leave the organization by myself.

u/anonRexusOP

I previously did business with them, but they are still visible in my backend as a guest organization that I cannot leave. This means I still have a guest account within their tenant, which I would like to have removed completely for security and privacy reasons.

u/adamwoja

Yes, youre a guest in THEIR tenant. How does that relate to your security or privacy? They have no access to your account or organization.

u/Affectionate_Ad_3722

I've looked into this before, for the same reason. There doesn't seem to be anything you can do from your side. It's up to the other organisation to remove you.

u/adamwoja

I cant see how its a problem? they arent connected to your organization, its the other way around.

u/OkEmployment4437

Yeah, if they delete the guest object in their tenant that is usually the real fix. The org tile on your side can hang around for a bit because Entra is slow about propagating and cached account metadata is annoyingly sticky, but once that guest is gone and any external identity references are cleaned up on their side, you generally lose the association. If it still shows up after some time and you still can't sign in to leave manually, you're basically in Microsoft support territory since there isn't much of a self service path once the guest account is blocked.

u/THICCC_LADIES_PM_ME

Just ignore it