Use AD Groups in SharePoint Online Skip to main content
https://support.okta.com/help/answers?id=9062a000000bminqay&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Jordan NolanJordan Nolan 

Use AD Groups in SharePoint Online

I have Univeral Sync enabled for Office 365.  I can see the Security Groups correctly in Okta and the O365 Admin center.  Same for Distribution Groups. 

Do I have to do something in SharePoint online to be able to use the AD Groups because I only see options for using or creating SharePoint groups?
Ezazul BhuiyanEzazul Bhuiyan (Okta, Inc.)
Hi Jordan,

Thank you for contacting Okta support. If you see the option for "Universal Sync" which is a feature only available on the Provisioning tab of certain OAN app. Office 365 is one of the app where this feature is available.  

Since you are using our OAN app for SharePoint online, unfortuntely we don't have the feature available on the Sharepoint online app.

Please consider adding your voice on this matter to our Feature Request on the same or below link--

https://community.okta.com/community/admins

I'd like to encourage you to upvote it as the more votes it gets, the higher the chances for it to be considered for next releases.
Jordan NolanJordan Nolan
Hi Ezazul,

I am not sure I understand your reply.  I do have "Universal Sync" enabled in the O365 app.  I can see that AD Security Groups are in the O365 portal, but cannot seem to use them in SharePoint.  Only SP groups are listed when trying to add security to a SP site.
Ezazul BhuiyanEzazul Bhuiyan (Okta, Inc.)
Hi Jordan,

Thank you for your response. Currently "Universal Sync (Enhanced Provisioning)" is only applicable for O365 app portal and cannot be used in Sharepoint with our current offerings. That is the reason you cannot see the "Security Groups" in SP. It is a limitaion on our side and will be considered as a Feature request.