External users — such as contractors or implementation partners — can be granted access to the platform as guest users through your organisation's Microsoft Entra ID tenant. Before a guest user can be provisioned to the platform, they must first be invited and created as a user within Entra ID.
Note that personal email accounts from public providers may not be permitted, depending on how the Foundation Cloud for Energy enterprise application is configured in your tenant.
Invite an External User in Entra ID
Sign in to the Microsoft Entra administration portal.
Navigate to Microsoft Entra ID \> Users.
Select New user and choose Invite external user.
Enter the external user's email address and display name.
Open the Properties tab and set User Type to Guest.
Review the details and proceed to Review + Invite.
Select Invite.
An invitation email is sent to the external user. Once they accept the invitation, the guest account is active in your Entra ID tenant.
Assign Platform Access
After the guest user exists in Entra ID, assign them to the Foundation Cloud for Energy enterprise application so they are included in provisioning. Once provisioned to the platform, roles must be assigned within the platform before the user can access any applications.
See Configuring SCIM Provisioning for provisioning steps and Configuring User Roles for role assignment.
Guest Username Format
When guest users are provisioned via SCIM, their username in the platform follows a format different from internal users:
originaluser_domain.com#EXT#@yourtenant.domain
For example, if [email protected] is invited as a guest, their username will appear as:
jane.smith_partner.com#EXT#@yourorganisation.com
The domain after #EXT#@ is the primary domain of your Entra ID tenant. This format is generated automatically by Entra ID and ensures that guest accounts remain uniquely identifiable across tenants — the same individual can be invited to multiple organisations without username conflicts.