Microsoft Defender for Identity is a cloud-based security solution that uses on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at the organization.

• Microsoft Defender
• Microsoft Office 365
• Single Sign-On (SSO)

Okta cannot provide any information on the behavior of Microsoft Defender for Identity when federated, as it's not an IDP-specific interaction.

Since any Service provider that has the functionality has to specify the outcomes of their service when federated with an IDP.

For any questions or assistance with this functionality, please contact Microsoft Support.

Related References

• Microsoft documentation