jql7r (jql7r) asked a question.
We are currently using ADSync for Office 365, I've configured okta to match all accounts being synchronized and wanted to change over to Okta federation. Here are what I think my steps are below.
* Disable AD Sync
* Enable WS-Federation through Okta interface
Beyond those two steps, is there anything I'm missing? I don't want to lose any accounts or data as a results of my migration.
Thanks,
We use cookies to provide the best website experience and to help understand marketing efforts. We may also share data with ad partners to reach potential customers across the web. To learn more, visit our Privacy Policy. Click here for Your Privacy Choices. You may also opt out of this sharing by signaling your preference via GPC, applicable only to the browser signaling the opt-out.
More information
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Select All
We use cookies to provide the best website experience and to help understand marketing efforts. We may also share data with ad partners to reach potential customers across the web. To learn more, visit our Privacy Policy. Click here for Your Privacy Choices. You may also opt out of this sharing by signaling your preference via GPC, applicable only to the browser signaling the opt-out.
More information
These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.
These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.
Select All
Hello Eric,
I would strongly recommend opening a Support Case with Okta regarding this concern. Office 365 is such a mission critical application which you do not want any downtime.
Listed below is some Office 365 Frequently Asked Questions
https://help.okta.com/en/prod/Content/Topics/Apps/Office365-Deployment/o365-faqs.htm
Office 365 integration FAQs
What should I do if I want to configure multiple Office 365 domains under one tenant?
You can use Automatic WS-Federation to configure multiple Office 365 domains in one app instance. See Federate multiple Office 365 domains in a single app instance.
However, if you are using Manual (PowerShell) WS-Federation, you need to configure a separate instance of the Office 365 application within Okta for each domain you have in your office tenant. For example, if you have five domains under your office tenant, you would have five office apps in Okta, each pointed to the same office tenant but set with a different domain. See Add Office 365 to Okta.
Can my users access Office 365 using POP and IMAP?
They can but we can't secure them through MFA since they don't use Modern Authentication.
We strongly recommend disabling these protocols in your Office 365 tenant. To disable these legacy protocols in your Office 365 tenant, refer to this Microsoft Support documentation: How to enable or disable POP3, IMAP, MAPI, Outlook Web app or Exchange ActiveSync for a mailbox in Office 365.
Why don’t I see options to license and roles while assigning the Office 365 app?
It’s probably because you haven’t set up Okta for provisioning users into Office 365. See Provision users to Office 365.
Can I use PowerShell to configure Office 365 in Okta?
Yes. See Configure Single Sign on using Secure Web Authentication.
Related topics
Get started with Office 365 provisioning and deprovisioning
Get started with Office 365 sign on policies
Advanced integration topics for Office 365