th7vu (th7vu) asked a question.
Integration with already federated Office365 domain
Hello, I need some confirmation on my understanding below related to O365 federation with Okta: [1]If a customer has already setup a federated domain (say example.com.au) on O365 (say, using ADFS), then is it required to "un-federate" the domain before we could setup federation to the same domain via Okta? In my understanding, during SSO configuration, Okta automatically detects that the domain is already federated using some other IdP like ADFS, and executes a different powershell cmdlet to setup federation with Okta. In other words, no special steps needed. Please confirm. [2]If a customer has already imported users from AD to O-365, i.e. the immutableid for users is already set on O-365. What are the precautions, if any, to be taken before setting up SSO (WS-Fed) with Okta? How will Okta know about these immutableids? In my understanding, Okta assumes that the immutableid is Base64Encoding of User’s AD-GUID and expects that will match that immutableid set on the user on O-365. This immutableid is included on the assertion within WS-Federation protocol. Please confirm. Thanks,Jatin
