Browse all topics
Microsoft Teams

Teams external collaboration patterns

Picking the right external-collaboration pattern in Microsoft Teams — guests, shared channels, federation, anonymous join.

External collaboration in Microsoft Teams is a confusingly named space with four overlapping mechanisms. Picking the right one for the relationship matters for security, user experience, and operational sanity.

The four mechanisms

  • Guest access — full member of one of your teams, with a guest identity in your tenant.
  • External access (federation) — one-to-one chat/calling with other Microsoft 365 tenants. No team membership.
  • Shared channels (Teams Connect) — invite people from other Microsoft 365 tenants into a specific channel without making them guests in your tenant.
  • Anonymous join — join a meeting without any tenant identity; just enter a name.

When to use each

Guest access

For deep, long-term collaboration with named external individuals — an embedded consultant working in your project team for a year, an executive advisor with full visibility into your strategy team, etc.

Pros:

  • Full access to the team's content (subject to permissions).
  • Familiar Teams experience for the guest.

Cons:

  • Each guest is an identity in your tenant.
  • Guests accumulate over time if not cleaned up.
  • Permissions on team-wide files exposed to all members including guests.

External access (federation)

For direct messaging and calling between specific people at different organisations — a CEO talking to a peer at a partner company. No shared workspace; just chat and call.

Pros:

  • No identity created in either tenant.
  • Persistent direct relationship between specific people.
  • Lightweight.

Cons:

  • Limited to 1:1 chat and calling.
  • No shared files, no shared channels.

Shared channels (Teams Connect)

For ongoing cross-organisation work between teams at different Microsoft 365 tenants — a joint product team with people from two companies, an industry consortium working on a standard, etc.

Pros:

  • Members keep their own tenant identity.
  • Cleaner than mass guest access.
  • Each shared channel has its own SharePoint site with appropriate isolation.

Cons:

  • Requires both tenants to configure Cross-Tenant Access Settings.
  • Channel members don't see the rest of the team.
  • Not suitable for non-Microsoft-365 external parties.

Anonymous join

For one-off external meetings where the attendee doesn't have a Microsoft 365 account (or you don't want to bother with identity setup) — webinar attendees, occasional vendor calls, customer events.

Pros:

  • No identity setup needed.
  • Just send a meeting link.

Cons:

  • No identity audit trail.
  • No persistent relationship after the meeting.

Decision matrix

| Scenario | Right mechanism | | --- | --- | | Long-term embedded contractor | Guest access | | Direct chat with another company's CEO | External access | | Ongoing project with partner organisation | Shared channel | | One-off webinar or external meeting | Anonymous join | | Specific external user needs file access | Guest or shared channel | | Mass external audience for a town hall | Anonymous join via Town Halls |

Configuration

All four are configured independently — confusingly:

  • Guest access — overall toggle in Teams admin center plus tenant-wide controls in SharePoint admin center for guest file sharing.
  • External access — in Teams admin center → Users → External access. Tenant-by-tenant federation control.
  • Shared channels — Cross-Tenant Access Settings in Entra admin center, plus shared-channel-specific policies in Teams admin center.
  • Anonymous join — Teams meeting policy.

A tenant can have any combination enabled. Many production configurations have all four enabled with different controls per relationship.

Common pitfalls

  • Asking "is Teams open to external?" without distinguishing which mechanism is meant. Be specific.
  • Granting guest access when shared channels would be cleaner — shared channels are the modern default for ongoing cross-org work.
  • Forgetting to lifecycle external access — orphaned guests, stale shared channels.
  • Mismatched configuration between tenants for shared channels — both tenants need to trust each other for the partner.

For organisations doing significant external collaboration, decide on a deliberate posture per relationship type. Document it. Communicate to users which mechanism to use when. Audit periodically. This deliberateness is the difference between "external collaboration works" and "external collaboration is a mess."