Cannot Change Microsoft Office 365 App Username for a User After a Name Change
Jul 15, 2024
Okta Classic Engine
Okta Integration Network
Overview
A username change is unable to be updated from the Microsoft Office 365 (O365) application assignment due to the following errors:
- GivenName: Value for required property Gienname is missing
- Surname: Value for required property Surname is missing
- Mails: Value for required property Mail is missing
Applies To
- Microsoft Office 365 (O365) Provisioning
Cause
Licenses/Roles Management Only the only details that are provisioned over to Office 365 are the License and Role types.
In a use-case where the username is already adjusted in Active Directory, reflected in the Okta Username Format on the user's profile, etc., and the Office 365 Application Username Format is technically dependent on either the AD UPN or the Okta Username, the Office 365 username will still reflect the original username once fully federated with Office 365 because user attributes (including username) are not provisioned over. Office 365 will look at possible dependencies and fail the task because it expects more information (GivenName, Surname, Email) to succeed.
Solution
If the Application Assignment Master is set to Individual:
- Ensure that "Deactivate Users" is disabled in the To App provisioning settings.
- Unassign Office 365 from the user.
- Ensure the Application Username Format is pulling from the attribute adjusted for the user.
- Reassign Office 365 to the user.
If the Application Assignment Master is set to Group:
- Unable to change the Assignment Master.
- Use the following API call to remove the app assignment from the user:
- /api/v1/apps/${applicationId}/users/${userId}
- Where {applicationId} is the 0oa********** id of the application, and {userId} is the 0ou********** id of the user.
- Once the application has been removed for the user, either reassign it using the API or go back to the UI to reassign it manually. Convert the assignment to a group if desired.
