Thank you for posting on our Community page.

Since there are 3 different Office domains, it should work smooth enough. The only thing that you need to do is to disable Provisioning for domains A and B, turn on Provisioning for domain C and assign the users to this one. The users are going to be automatically created and have access to Office.

As for SSO, that should also not be a problem, as there again are 3 different AD and Office domains and all of them should be set as different Office applications in Okta (so you can just set up WS-Fed for domain C before starting to migrate the users).

Now, there are a couple of thing that I see as problematic:

• Since there are 3 different AD domains (and 3 Office domains), after the migration (from A and B to C), the users will have different UPN suffixes (due to the domain change);
• There should be paid attention to the users' inboxes, as they will lose them, also due to the domain change;
• Just in case Provisioning is not enabled, you can just create a 3rd Office app in Okta, set up SSO and assign it to users prior to unlinking them from the other 2 Office apps.

If you'd like us to take a closer look at your configuration and help you make this migration, please don't hesitate to open a Support case.

Thank you,

Paul Auer

Technical Support Engineer | Okta

Hi Paul,

​

Many thanks for your answers and help.

​

Sorry, my English is really poor.   I will use some pictures to show my meanings:

​

​

This is the current structure: 

https://1drv.ms/u/s!AkUdhxRe-G-6jB7Ds6ZqW-_5ATXK  (a sharing link, as I can't find a way to paste picture here...)

​

description:

1.three separate companies (1,2,3) have their own AD(1,2,3), their own Office 365(1,2,3), their own custom domain(domain1.com, domain2.com, domain3.com), and all they use OKTA to sync their AD users to Office 365 , and OKTA SSO solution.  

2.Now the company 3  purchased company 1 and company 2, and want to migrate both company1 and company2's   Office 365 domain, users, data to the Office 365 tenant3, they don't use tenant 1 and tenant2 any more.

​

This is what I want to achieve:

https://1drv.ms/u/s!AkUdhxRe-G-6jB2bm5bhNPFa1lV5

​

description:

picture here is what I want to achieve.

 I think when I do Office 365 migration(I just talk users part , not domain and data part here),  I need to break OKTA sync for (users in AD1-> Office 365 tenant 1,   users in AD2->Office 365 renant2) ,   then resync users in AD1 ->Office 365 tenant 3 , users in AD2 -> Office 365 tenant 3?  But if I break sync first (users in AD1-> Office 365 tenant 1,  users in AD2->Office 365 renant2),  I suppose users in Office 365 tenant1 and tenant2 may not use OKTA sso, is it right? If yes, I believe customer will not accept it. So is this the only way or do we have other methods to achieve this goal.

I am new to Okta, please forgive me if my question is stupid.   If possible, please help the list the correct steps.

Thanks again.

Sky Pei

​

​

Update:

I am not sure what the correct sync structure via OKTA.  Please help confirm

I wrote in my second post this is what I want to achieve: https://1drv.ms/u/s!AkUdhxRe-G-6jB2bm5bhNPFa1lV5 , not sure if it possible,  or should it be this one: https://1drv.ms/u/s!AkUdhxRe-G-6jCMq9bbRW1SalK5g

Thanks