Hi. In this situation Okta is federated to Office 365. New user is created and assigned an O365 E3 license with email address. Okta sends the Okta enrollment email to the users new O365 email account. As the link to enroll is within the O365 email account protected by Okta, how does the user gain access to enroll?
What is the status of your user in Okta prior to being provisioned over to Office 365?
They are a new user added to Okta, by default that puts their status: Password reset. User is now in one-time password mode.
What sort of enrollment are we referring to? MFA enrollment?
Sorry, I should have been more specific. When you click on the link in the User Activation email, it takes the user through the Okta process of defining a Password, Security Questions, MFA etc. Thats what I refer to as the Okta Enrollment Process.