internal & external user access control

[gnussbaum]

I'd like to know options for secure access especially for external users -- afaik, madcap sends invite, they set password and their email is their username. I'm unsure if an invite or username/password can be shared, or if we can use any additional security? We are also using Azure SSO for our internal users.