This is my best guess. I am not hopefull that it will work. I think you would need to edit the external user in Entra and change them from being a "guest" to a "member". This will cause Entra to treat them like a standard "internal" user. Next, I think you will need to use EAP-TLS. The password for an external user is only stored in the "home" authentication environment, so you would not have access to it for the authentication. However, a certificate issued from your environment that includes their username would be trusted. Going sideways, have you considered using the Splash Access student enrollment system? It is purpose-built for this exact problem. https://www.splashaccess.com/portfolio/education/
... View more
