When dealing with Azure AD guest users, some errors can be tricky. Mix in some security requirements and it gets confused and forces requirements that can't be done.