Okta Fails to Deprovision Microsoft Office 365 User After a Licensing Provisioning Error
Last Updated:
Overview
When an organization exceeds Microsoft Office 365 (O365) licensing seats, Okta encounters a provisioning error. Azure Active Directory (Azure AD) creates the user without a license, but removing the account from the O365 application in Okta fails to trigger a deactivation event. Address the licensing issue and retry the provisioning process to resolve this error.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Microsoft Office 365 (O365)
- Azure Active Directory (Azure AD)
- Provisioning
Cause
Removing the account from the O365 application in Okta does not trigger the "Push user deactivation to external application" event. Additionally, the Microsoft Graph library that Okta leverages does not support clearing the on-premise immutable ID.
Solution
How is the Microsoft Office 365 licensing provision error resolved?
Address the licensing issue and retry the account provisioning process to resolve the error.
- Remove the licenses from the user assignment or purchase the required Microsoft license.
- Retry the account provisioning process in Okta.
Once the account provision is successful, Okta deactivates the Azure AD or O365 user when an administrator removes the user from the O365 application in Okta.
