We are using Jira Software and provisioning groups and users through Azure AD, this works fine, no problems here for user accounts from Azure AD/AD.
When we create or invite a guest, there is a guest account created in Azure AD. This guest account is joined to a group which is synced with our Jira tenant. With this group we can grant the guest access to the right project(s). Projects are 'private'.
We use also MFA from Azure in the entire organisation, the question is now, how to use MFA when the guest is accessing ourorganisation.atlassian.net. At this moment the guest uses only there own mail-address and password (password is created the first time logging on to the Jira tenant).
