How does Office 365 Licensing/Roles provisioning work for Exchange Online license management? (Using AAD Connect)
We have not yet migrated users over to Exchange Online and have a hybrid environment setup to prepare for the migration in the near future. We use AAD Connect and currently have Provisioning setup for Licenses/Roles Only. If we keep the Exchange Online license unchecked (in Okta) and start migrating mailboxes to Exchange Online, will the provisioning unassign the Exchange Online license and cause mailbox issues within Office 365?
If the onmicrosoft domain is federated with Okta - the license management will be done by Okta. If you do not assign license/role to the user/group, that will not assign the access to the licensed resorce inside Microsoft account, but if you assign the app Office 365 to the user, these will be created/match on to the onmicrosoft Domain, so their mailbox can be migrated as containing information but the user cannot access it without the license assigment .
If the onmicrosoft domain is not federated with Okta than the authentication flow is separate from provisioning flow, that means the license assignment is done exclusively in onmicrosoft domain only.
Please also check this Comunity post in relation to this: https://support.okta.com/help/answers?id=906F0000000blLUIAY