SethM.73894 (Customer) asked a question.
Office 365 Login Failure for Okta mastered users
I'm trying to setup WS-Federation to Office 365 without having an on-premise Active Directory instance.
When I assign the application to the user, the Immutable Id field is blank.
When I try to access an O365 app from the Okta Dashboard, I get this message:
Your account has not been configured for this application. Please contact your Okta administrator and ask them to import your account from Active Directory.
I can't find anything useful in the Okta logs.
Do I need to set immutableId to something different in the profile mapping in Okta for Office 365 when federating Okta-mastered users?
@SethM.73894 (Customer) Thank you for reaching out to our community to help you troubleshoot. The error you are seeing would be expected if the user does not have an Immutable ID. To fix this you would need to add manually the Immutable ID and this can be fetched by using PowerShell, please see our doc:
https://support.okta.com/help/s/article/How-to-get-a-list-of-Office365-immutable-IDs-using-Powershell?language=en_US
Or you can enable Provisioning and this will be automatically filled in once you assign the user to the application. If you want to enable Provisioning please follow our doc:
https://help.okta.com/en/prod/Content/Topics/Apps/Office365-Deployment/provision-users.htm