SharePoint Share Link Requires Sign-in Despite Anyone Settings: What Site Owners Should Check

You create a sharing link in SharePoint and set it to Anyone. Anyone with the link should be able to access the file without signing in. But when you or a colleague test the link, SharePoint still asks for a Microsoft 365 sign-in. This happens because SharePoint has multiple layers of sharing settings that can override the link permission you selected. This article explains the four settings that block anonymous access and shows you exactly where to check and fix each one.

Why SharePoint Still Requires Sign-in When the Link Is Set to Anyone

SharePoint sharing uses a layered permission model. When you create a link with the Anyone option, you are asking SharePoint to allow anonymous access to that specific file or folder. However, three higher-level settings can block that request: the tenant-level sharing setting, the site-level sharing setting, and the default link type setting. A fourth setting in Azure Active Directory controls whether external users can be invited at all.

If any of these settings is more restrictive than the link you created, SharePoint falls back to requiring a sign-in. The system does not warn you at the moment you create the link. It simply enforces the most restrictive policy in the chain. This means a site owner can create an Anyone link but still have it behave like a Specific people or People in your organization link.

The most common cause is that the tenant-level external sharing setting is set to New and existing guests instead of Anyone. When the tenant setting is more restrictive, it overrides any link you create at the site or item level. The second most common cause is that the site-level sharing setting is set to New and existing guests, which also blocks anonymous access for that site.

Steps to Check and Fix the Four Settings

1. Check the tenant-level external sharing setting
   Sign in to the SharePoint admin center. Go to Policies > Sharing. Under External sharing, look at the SharePoint section. The slider must be set to Anyone. If it is set to New and existing guests or Existing guests, change it to Anyone. Click Save. This change affects all sites that inherit the tenant setting.
2. Check the site-level sharing setting
   In the SharePoint admin center, go to Active sites. Select the site that has the link issue. Click on Policies in the toolbar. Under External sharing, check the setting. If it says New and existing guests, change it to Anyone. Click Save. This overrides the tenant setting for this specific site.
3. Check the default link type for the tenant
   In the SharePoint admin center, go to Policies > Sharing. Under File and folder links, look at the setting Choose the type of link that is selected by default when users share files and folders. If this is set to Specific people or People in your organization, users must manually change the link type to Anyone every time they share. Change the default to Anyone if you want all new links to be anonymous by default. Click Save.
4. Check Azure AD external collaboration settings
   Go to the Azure portal. Navigate to External Identities > External collaboration settings. Under Guest invite settings, ensure that Anyone in the organization can invite guest users including guests and admins is selected. Under Collaboration restrictions, ensure that Allow invitations to be sent to any domain is selected. If these settings are too restrictive, SharePoint may block anonymous access even when the tenant and site settings are correct.

If the Anyone Link Still Requires Sign-in After Checking All Settings

SharePoint Library Requires Sign-in After Setting Anyone

Some SharePoint libraries have unique permissions that override the site-level setting. Go to the library, click the gear icon, and select Library settings. Under Permissions and Management, click Permissions for this document library. If the library has broken inheritance from the site, check the sharing settings for the library itself. You can set the library to inherit permissions from the site by clicking Delete unique permissions in the ribbon.

OneDrive Files Require Sign-in Even with Anyone Links

OneDrive has its own external sharing setting in the SharePoint admin center. Go to Policies > Sharing. Under OneDrive, ensure the slider is set to Anyone. If it is set to New and existing guests, OneDrive files cannot be shared with anonymous links. Change the setting to Anyone and click Save.

SharePoint Site Collection Feature Blocks Anonymous Access

Some site collections have the Limited-access user permission lockdown mode feature enabled. This feature prevents users with limited access from using anonymous links. Go to Site Settings > Site collection features. If Limited-access user permission lockdown mode is active, deactivate it. This feature is rarely needed and can block anonymous sharing unexpectedly.

Tenant Setting vs Site Setting vs Link Setting: Key Differences

Item	Tenant-Level Setting	Site-Level Setting	Link-Level Setting
Description	Controls external sharing for all SharePoint sites and OneDrive	Controls external sharing for a specific site	Controls access for a specific file or folder link
Location	SharePoint admin center > Policies > Sharing	SharePoint admin center > Active sites > select site > Policies	File or folder > Share > Link settings
Most restrictive option	Anyone (most permissive)	Anyone (most permissive)	Anyone (most permissive)
Override behavior	Overrides site and link settings when set to a more restrictive value	Overrides link settings when set to a more restrictive value	Cannot override tenant or site settings

The tenant-level setting is the most powerful. If it is set to New and existing guests, no site or link can use Anyone. The site-level setting is the second most powerful. If it is set to New and existing guests, no link in that site can use Anyone. The link-level setting is the least powerful. It only works if both the tenant and site settings allow Anyone.

After you change the tenant or site setting to Anyone, existing links do not automatically update. You must recreate the Anyone link for each file or folder that needs anonymous access. The new link will work without sign-in.

To verify that anonymous access is working, open a private browser window or an Incognito window. Paste the Anyone link into the address bar. If the file opens without a sign-in prompt, the settings are correct. If you still see a sign-in prompt, repeat the checks in this article starting with the tenant-level setting.