Cross-Tenant Authentication Requirement: Okta Integration Between Two Azure AD Tenants Without Guest Accounts or #EXT# Suffix

The client operates two separate Azure AD tenants—one hosting Azure Virtual Desktops (AVDs) and the other containing user identities. They are looking to implement cross-tenant authentication using the Okta platform, without the need to create guest accounts or append the #EXT# suffix to user IDs.

If you are sure this implementation is feasible, please do share the documentation from the Okta platform.

This might be a bit difficult to find a solution fully in a forum post.

Could you please raise a support case from one of your paid Okta tenants? That way, the support team can take a closer look at your configuration and provide more tailored assistance.