Okta Error Occurs When Federating a Default Domain in Microsoft Office 365
Last Updated:
Single Sign-On
Okta Integration Network
Okta Classic Engine
Okta Identity Engine
Overview
Okta generates an error when attempting to federate a default domain with the Microsoft Office 365 (O365) application because Microsoft Office 365 designates the domain as the default domain. Promoting a different domain as the default domain in the Microsoft 365 admin center resolves this error. When attempting to federate a domain with the Okta O365 application, Okta displays the following error message:
Federating to the 'Default' domain is not allowed
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Microsoft Office 365 (O365)
- Single Sign-On (SSO)
Cause
Microsoft Office 365 currently has the domain targeted for federation set as the default domain.
Solution
How is the default domain federation error resolved?
Promote a different domain as the default domain by navigating to the domain settings in the Microsoft 365 admin center and selecting a new default domain.
- Sign in to the Microsoft Office 365 tenant.
- Navigate to Microsoft 365 admin center > Navigation Menu > Show All > Settings > Domains.
- Click on the three dots located next to the domain to be promoted to the default domain and select Set as default.
