How to Switch from ImmutableID to mS-DS-ConsistencyGuid Anchor for Office 365 Users
Sep 5, 2025
Okta Classic Engine
Okta Identity Engine
Okta Integration Network
Overview
Applies To
- Microsoft Office 365 (O365)
- Active Directory
- Provisioning
- Mappings
Solution
To change the ImmutableID to mS-DS-ConsistencyGuid in Okta is needed to map the mS-DS-ConsistencyGuid from AD to Office 365 to replace the default setting for immutableId (which uses objectGUID as the default for externalId on the Office 365 user app profile).
From the Okta Admin console:
- Directory > Profile Editor > Directories > Profile.
- Click on Add Attribute > search ms-ds > select mS-DS-ConsistencyGuid > Save.
- Go back to Profile Editor > search Office > click Mappings.
- Change mapping for immutableId from externalId (objectGUID) to mS-DS-ConsistencyGuid.
- Save and Apply Mappings.
