2. External user invited This creates invitation in Access Request List Invitation email sent to guest with invitation URL Guest clicks URL. Verification of validity of invitation and if external access is enabled. Guest signs in with Microsoft Account or Office 365 Account. Verification of redeemer. Guest added to SharePoint Online Directory Service & to site collection Guest gets permissions on the object & is redirected to it

4. User shares a document using Edit or View link Hidden user created and granted permissions on the document. Inheritance broken. Guest receives email with Guest Link. Clicks on the link. Verification: Are Guest Links enabled? Is this a valid link? Does the document exist? User impersonates the hidden user and is redirected to the document in web apps.