How to Fully Disable Microsoft Office 365 Provisioning in Okta and Change the User Sync Status to Cloud-Only in Azure Active Directory
Apr 27, 2026
Okta Integration Network
Okta Classic Engine
Overview
This article describes how to fully disable Office 365 Provisioning.
Applies To
- Office 365 Provisioning - User Sync or Universal Sync
- Disable Provisioning
- Okta Integration Network (OIN)
- Okta Classic Engine
Solution
Follow the steps below to fully disable Office 365 Provisioning:
- Disable Provisioning for Office 365 in Okta:
- Navigate to Applications > Applications > Office 365 > Provisioning > Integration.
- Uncheck Enable API integration, then click Save.
- Disable DirSync using the PowerShell command:
Set-MsolDirSyncEnabled -EnableDirSync $false.- If needed, the Turn off directory synchronization for Microsoft 365 article can be used for guidance on connecting to Office 365 with PowerShell.
NOTE: According to the Microsoft article Can't manage or remove objects that were synchronized through the Azure Active Directory Sync tool, the deactivation may take 72 hours to complete. The time depends on the number of objects in the cloud service subscription account.
