Microsoft Office 365 provisioning flow fails with the following error visible in the Okta dashboard:

Automatic provisioning of user <username> to app Microsoft Office 365 failed: Could not validate your Office 365 credentials, received error: 400 AADSTS50126: Error validating credentials due to invalid username or password. Trace ID: <TraceID> Correlation ID: <Correlation ID> Timestamp: <Timestamp>
 

• Microsoft Office 365
• Provisioning
• Error

This error appears because the Office 365 Global Administrator credentials for creating the API connection are invalid.

Please follow the below video or steps:


 

1. Go to Okta Admin Console, navigate to Applications > Applications > Office 365 > Provisioning > Integration > click Edit.
2. Click Re-authenticate with Microsoft Office 365. The Microsoft Azure login page appears.
   • Log in to the Microsoft Azure account.
   • Read and accept the requested permissions.
   • Upon accepting the scopes in the Microsoft Azure portal, the page is redirected back to Okta.
3. Enter the valid Office 365 Global Administrator credentials.
4. Click Test API Credentials.
5. A message confirming successful authentication is generated. Click Save. 
6. Attempt the failed tasks again. Navigate to Dashboard > Tasks. Any failed assignments should appear under Tasks.

7. After locating the failed task for the user that should be retried, click Retry Selected.