Okta unassigns users from the Microsoft Office 365 integration or generates an import roadblock event after an import. This issue occurs when user accounts are inactive or unlicensed in Microsoft. Import Safeguard settings stop an import before Okta makes changes if a specific percentage of application unassignments or user deactivations occurs. Resolve this by verifying the active status and licenses of the users in Microsoft or by enabling the Import Unlicensed Users feature in the Okta Microsoft Office 365 application instance.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Microsoft Office 365
• Imports

The issue occurs because the user accounts are no longer active in Microsoft or a Microsoft administrator manually removed the active Microsoft user account licenses outside of Okta. Okta does not import Microsoft Azure Active Directory users without a valid Microsoft Office 365 license assignment unless an Okta Administrator enables the Import Unlicensed Users feature from Okta's Microsoft Office 365 Application import configuration page.

What resolves Microsoft Office 365 unassignments?

Review the user account status in Microsoft and manually import unlicensed users to ensure successful Okta assignments. Verify the active status and licenses in Microsoft by reviewing the following items.

• Verify that the targeted Microsoft Azure Active Directory user accounts are active in the external Microsoft Entra ID or Microsoft Admin Portal.
• Validate the Microsoft license assignment status.
• If Okta should not import unlicensed Microsoft users, ensure the missing Microsoft Azure Active Directory user possesses at least one Microsoft license in the external Microsoft platform.
• If Okta should import unlicensed Microsoft users, ensure the Okta Administrator optionally enables the Import Unlicensed Users feature in the Okta Admin Console. 

Enable the import of unlicensed users in the Okta Admin Console.

Enable the import of unlicensed users by navigating to the application provisioning settings in the Okta Admin Console and selecting the appropriate feature checkbox.

1. Navigate to Applications > Applications in the Okta Admin Console.
2. Select the Microsoft Office 365 application.
3. Select the Provisioning tab.
4. Select To Okta in the left settings menu.
5. Select the Import unlicensed users checkbox.

Related References

• Import Roadblock - New Imports Will Not Run
• Configure imports from Office 365 to Okta
• Okta Microsoft Office 365 User Import Requirements