Guest user object ≠ guest password
Your tenant stores a guest record for access decisions, while sign-in usually uses an existing identity. Tenant stores a guest user object for access decisions. Used for groups, roles, and policies. Credentials usually remain with the guest's identity provider. You control permissions and sign-in rules.