ChrisK.60231 (Customer) asked a question.
Office 365 Default Domain
My organization is planning on integrating Office 365 into Okta. I have been going over some of the pre-reqs before we jump into the process. I recently noticed that our default Office 365 domain is set as our routable domain. Typically the default is the onmicrosoft.com domain.
My question would be, is this going to be a problem or are we going to have to set the default to the onmicrosoft.com domain? I've read at a few places that the default domain can't be federated, but it might just be implying the fact that the onmicrosoft domain is the one that is typically the default.
Hello,
The common practice is that the .onmicrosoft.com domain is set as default and another domain is used for federation.
This is because you cannot federate the .onmicrosoft.com domain
as stated in this article
https://help.okta.com/en/prod/Content/Topics/Apps/Office365/Deploy_Office365/Configure_Office365_Domain.htm
and you cannot federate to the default domain because you need the administrator to be able to connect in case the federation breaks.
Other articles that could shed more light on the subject are these:
https://help.okta.com/en/prod/Content/Topics/Apps/Office365/Deploy_Office365/Okta_and_Office365.htm
https://saml-doc.okta.com/Provisioning_Docs/Office_365_Deployment_Guide.pdf
https://docs.microsoft.com/en-us/office365/admin/setup/domains-faq?view=o365-worldwide
Best regards,