<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008C3jeRSAROkta Classic EngineOkta Integration NetworkAnswered2025-02-14T09:01:45.000Z2016-07-23T22:07:15.000Z2021-02-04T08:39:48.000Z

Tien-OktaSSO (BMC Software) asked a question.

July 23, 2016 at 10:07 PM
License removal with Okta User Provisioning option for Office365 - License/Role Management only. Does it work?
If we use Okta User Provisioning option for Office365 - License/Role Management only, does Okta remove the license in Office365 when user is remove access to the app in Okta? We tested it and it looks like assigning license works correctly but there is no removal of license when user access to the app is removed on Okta side.
  • 9 answers
  • 3.92K views
JasonN.29484 likes this.

  • gabriel.sroka1.4374539321839353E12 (Okta, Inc.)

    Hi Tien

    We don't remove the Office 365 license. This article:

    https://support.okta.com/help/articles/Knowledge_Article/Office365-Deployment-Guide

    explains why: Deactivate Users – Okta automatically creates Office 365 accounts when a user is assigned to the Okta Office 365 app. If you un-assign the user from the app, Okta will switch the Office 365 account’s sign in status from Allowed to Blocked. Their Office 365 license will remain. The reason we just switch this to Blocked is that by un-assigning the license, you also delete all user data (emails, OneDrive files) associated with the account.
    Expand Post
    Selected as Best

  • gabriel.sroka1.4374539321839353E12 (Okta, Inc.)

    Hi Tien

    We don't remove the Office 365 license. This article:

    https://support.okta.com/help/articles/Knowledge_Article/Office365-Deployment-Guide

    explains why: Deactivate Users – Okta automatically creates Office 365 accounts when a user is assigned to the Okta Office 365 app. If you un-assign the user from the app, Okta will switch the Office 365 account’s sign in status from Allowed to Blocked. Their Office 365 license will remain. The reason we just switch this to Blocked is that by un-assigning the license, you also delete all user data (emails, OneDrive files) associated with the account.
    Expand Post
    Selected as Best

  • JodyT.96690 (Customer)

    Is it possible to get an update on this? Removing only the license but NOT deleting the account does not delete OneDrive files, email, etc.  The data is still accessible if the user is in a Blocked/Unlicensed state.  I've confirmed this within the product for an account that was disabled 90 days ago.  So --- can Okta be set up to revoke applicaiton access AND remove existing license?

  • x11p9 (x11p9)

    I agree.  We need to be able to remove the license as well.  While we can script it to release the license it would be much better to have the option in Okta and eliminate that extra step.

  • JasonN.29484 (Customer)

    Same here. I would also like to see the ability to enable the de-provisioning of 365 licenses.

  • j5v7c (j5v7c)

    We are seeing it work for us.  License/role only, we remove the user from the group, the license is removed from Okta.  This assumes the user is still active, if the user is termed, yeah, we have the same problem. We do not however, sync our users through Okta to O365, we use ADConnect for that (which controls the active/deactive state of the user in O365)

  • Jamie McDonnell - Okta (Okta, Inc.)

    Hi All, just found this thread and see there wasn't an answer provided, apologies.  The Enhanced Offboarding functionality has now moved to EA (Early Adoption) so if you're interested in testing it then please log a support ticket and request they switch on the functionality for you.

    Thanks

  • VanH.30758 (Lytx, Inc.)

    Hi Jamie,

     

    Do you have any links that we can read up on this EA feature?  It's a highly desired function in our org as well but we'd like to read over the details before requesting the functionality be enabled.

     

This question is closed.
Loading
License removal with Okta User Provisioning option for Office365 - License/Role Management only. Does it work?