Okta requires Microsoft Office 365 users to meet specific criteria for a successful import. Users fail to import into Okta when they lack an active status, an assigned license, or required profile attributes. Resolve import failures by verifying the Okta Office 365 application import configuration settings and ensuring the external Microsoft Azure Active Directory (AAD) user object meets all mandatory conditions.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Microsoft Office 365
• Provisioning
• Imports

Microsoft Office 365 users fail to import into Okta when they lack an active status, an assigned license, or required profile attributes such as an email address.

What are the requirements for importing Microsoft Office 365 users into Okta?

Verify the following mandatory user criteria and configuration settings to ensure a successful import from Microsoft Office 365 to Okta.

• The target MS AAD user must have an Active status in the Microsoft AAD or Office Admin Portal. Okta DOES NOT import MS AAD users with an Account Disabled or Blocked sign-in status.
• The Microsoft AAD user must have a configured email address.
• Okta imports Microsoft AAD users with blank First name and Last name values starting from the Okta Production/Preview v2026.08.0 release.
• Okta does not import Microsoft AAD users without a valid Microsoft Office 365 license assignment unless the Import unlicensed users feature is enabled (starting from the Okta Production/Preview v2026.08.0 release). 

How is the import of unlicensed users enabled?

Enable the import of unlicensed users by navigating to the application provisioning settings in the Okta Admin Console and selecting the appropriate feature checkbox.

1. Navigate to Applications > Applications in the Okta Admin Console.
2. Select the Microsoft Office 365 application.
3. Select the Provisioning tab.
4. Select To Okta in the left settings menu.
5. Select the Import unlicensed users checkbox.

Related References

• Configure imports from Office 365 to Okta