Frequently Asked Questions: Improvements to external sharing in OneDrive & SharePoint - Retiring SPO OTP & Transition to Microsoft Entra B2B

1. Is OTP being retired as a supported authentication method for guests?

   No. One-time passcode (OTP) is not being retired. External user authentication is transitioning from SharePoint Online (SPO) to Microsoft Entra B2B.

   Microsoft Entra B2B uses one-time passcode (OTP) as the default authentication method for guests in both new and existing tenants. For more information, see One-time passcode authentication.

2. Can I opt out of this change?

   No. This change applies to all tenants and aligns with Microsoft's strategy of using one centralized identity provider across all Microsoft 365 applications.

3. Can I choose when this integration is enabled for my tenant?

   No. Tenants are selected automatically by our rollout systems. You cannot choose a specific date.

4. Do all previously shared links need to be reshared?

   No. Previously shared links do not need to be reshared. Presence of a Microsoft Entra B2B guest account in your tenant ensures that the recipient has access to all the previously shared links.

5. How can I identify guests who don't have a guest account yet?

   At site level, use the external sharing report to get a list of guests invited via SPO OTP who do not yet have a Microsoft Entra B2B guest account. Refer to the "User E-mail" column. Learn more. For guests without a Microsoft Entra B2B guest account, you can proactively create the account in your directory to retain access to all previously shared files.

6. Can I enable Microsoft Entra B2B integration manually before the rollout?

   Yes. You can manually enable the integration until end of April 2026.

7. Are duplicate guest accounts created?

   No. If a Microsoft Entra B2B guest account already exists for a collaborator outside your organization, a duplicate is not created.

8. Do my guest users retain access to files shared before the integration?

   Yes, but only if they have a Microsoft Entra B2B guest account in your directory. If they do not have a Microsoft Entra B2B guest account, external collaborators see access denied starting July 2026. See FAQ #9 for how to resolve this.

9. How is a guest account created in my directory?

   A guest account is created through any of the following:

   • At least one file or folder or site is shared or reshared with the guest if they see access denied

   • A site was shared with the guest at any point in the past

   • A guest account was manually created in Microsoft Entra B2B at any point

10. Is there any impact on Anyone/Anonymous links?

    No, SPO OTP retirement and use of Entra B2B for external sharing does not impact Anyone/Anonymous links.