Import Directory Synced Entra Groups into Okta
Feb 13, 2026
Lifecycle Management
Okta Classic Engine
Okta Identity Engine
Overview
This article clarifies whether directory-synced Entra groups can be imported into Okta when provisioning is configured with Office 365 (O365). The issue occurs in environments where an on-premises Active Directory (AD) connects to an Azure environment via AD sync.
To determine whether a group is directory-synced, the Entra administrator has to navigate to the Microsoft Entra admin center, select "Groups," and review the "Source" field.
NOTE:
- Delegated: The group is directory-synced.
- Cloud: The group is Azure-native and eligible for import into Okta.
Applies To
- Office 365
- Provisioning
- Entra ID
- Group Imports
Cause
Okta imports cloud-synced groups only when O365 provisioning is active. Directory synced groups from an on-premises AD are not recognized during the import process.
Solution
Contact Microsoft Support to manage Azure settings.
