Disable Microsoft Office 365 Provisioning in Okta and Change User Sync Status to Cloud-Only in Azure Active Directory

Administrators can fully disable Microsoft Office 365 provisioning in Okta and change the user synchronization status to cloud-only in Azure Active Directory. Disabling the API integration in the Okta Admin Console and running a PowerShell command to disable directory synchronization achieves this goal.

• Okta Classic Engine
• Okta Integration Network (OIN)
• Microsoft Office 365 Provisioning
• Azure Active Directory (Azure AD)

How is Microsoft Office 365 provisioning disabled in Okta?

Disable the API integration in the Okta Admin Console and run a PowerShell command to disable directory synchronization in Azure Active Directory.

1. Navigate to the Okta Admin Console and go to Applications > Applications.
2. Select the Office 365 application.
3. Go to the Provisioning tab and select Integration in the left settings menu.
4. Clear the Enable API integration checkbox.
5. Select Save.
    
6. Open PowerShell and run the following command to disable directory synchronization:

Set-MsolDirSyncEnabled -EnableDirSync $false

If needed, the Turn off directory synchronization for Microsoft 365 article can be used for guidance on connecting to Office 365 with PowerShell.

NOTE: According to the Microsoft article Can't manage or remove objects that were synchronized through the Azure Active Directory Sync tool, the deactivation may take 72 hours to complete. The time depends on the number of objects in the cloud service subscription account.