External users can be directly assigned to Access Packages

This feature allows Entitlement Management admins to directly assign external users who are not in the directory to an access package using the user's email. Users are invited into the tenant as Guest users and are governed (as long as Entra ID Governance is configured).

Affected: Microsoft Entra ID, Entitlement Management

Related changes

• As an AP requestor, I can see in My Access who my approver(s) are if the access package owner allows me to · Access
• Revoke previously approved access package assignments in My Access · Access
• High Scale Compatibility (HSC) mode for Microsoft Entra External ID · External
• Microsoft Entra ID federation with External ID (EEID) · External
• General Availability – Enabling Social Identity Providers in Entra External ID Native Authentication via browser‑delegated (web‑view) flows using SDKs for applications · External
• Enforce Conditional Access policies like MFA on every PIM activation · Access

View at Microsoft → Copy summary