Azuread B2b Integration

<# .SYNOPSIS Azure AD B2B Integration for SharePoint .DESCRIPTION Enables Azure AD B2B integration for secure external sharing .NOTES NL Baseline v2.0 #> #Requires -Version 5.1 #Requires -Modules Microsoft.Graph [CmdletBinding()] param([switch]$Monitoring, [switch]$Remediation, [switch]$Revert, [switch]$WhatIf) $ErrorActionPreference = 'Stop' Write-Host "`n========================================" -ForegroundColor Cyan Write-Host "Azure AD B2B Integration SharePoint" -ForegroundColor Cyan Write-Host "========================================`n" -ForegroundColor Cyan function Invoke-Monitoring { try { Write-Host " Getting tenant domain..." -ForegroundColor Gray Connect-MgGraph -Scopes "Domain.Read.All" -NoWelcome -ErrorAction Stop $domain = (Get-MgDomain | Where-Object { $_.IsDefault }).Id $tenantName = $domain.Split('.')[0] $adminUrl = "https://$tenantName-admin.sharepoint.com" Write-Host " Connecting to SharePoint Online: $adminUrl" -ForegroundColor Gray Connect-SPOService -Url $adminUrl -ErrorAction Stop $tenant = Get-SPOTenant -ErrorAction Stop $result = @{ isCompliant = $tenant.EnableAzureADB2BIntegration b2bEnabled = $tenant.EnableAzureADB2BIntegration bccInvitations = $tenant.BccExternalSharingInvitations } Write-Host " Azure AD B2B Integration: $(if($result.b2bEnabled){'ENABLED'}else{'DISABLED'})" -ForegroundColor $( if ($result.b2bEnabled) { 'Green' }else { 'Red' } ) Write-Host " BCC External Invitations: $($tenant.BccExternalSharingInvitations)" -ForegroundColor Gray Write-Host "`n Benefits:" -ForegroundColor Cyan Write-Host " • Secure external user management" -ForegroundColor Gray Write-Host " • Centralized identity management" -ForegroundColor Gray Write-Host " • Better security controls" -ForegroundColor Gray if ($result.isCompliant) { Write-Host "`n[OK] COMPLIANT - B2B integration enabled" -ForegroundColor Green exit 0 } else { Write-Host "`n[FAIL] NON-COMPLIANT - B2B integration disabled!" -ForegroundColor Red exit 1 } } catch { Write-Host "ERROR: $_" -ForegroundColor Red exit 2 } } try { if ($Monitoring) { Invoke-Monitoring } else { Write-Host "Use: -Monitoring" -ForegroundColor Yellow } } catch { throw } finally { Write-Host "`n========================================`n" -ForegroundColor Cyan } function Invoke-Remediation { <# .SYNOPSIS Herstelt de configuratie naar de gewenste staat .DESCRIPTION Dit is een monitoring-only control, remediation delegeert naar monitoring #> [CmdletBinding()] param() Write-Host "[INFO] Dit is een monitoring-only control" -ForegroundColor Yellow Write-Host "[INFO] Running monitoring check..." -ForegroundColor Cyan Invoke-Monitoring }