User17119758653094377399 (Customer) asked a question.
Azure/OKTA MFA Mandated implementation
I am looking to implement Office 365 API Access and I am at the stage to "Provide Consent with an Office 365 administrator with global admin privileges" to select to "Authenticate with Microsoft Office 365".
However, I do have some concerns with the following alert: "Enabling federation will overwrite any existing federations your domain may have with Microsoft Office 365". If anyone has any insight or experience they can share regarding this process this would be a great help as none of the Support documentation that I have seen speaks to this.
Hi @User17119758653094377399 (Customer) , Thank you for reaching out to the Okta Community!
When editing the O365 Sign-on settings, and you have the WS-FED option selected (default being "Automatic") you are prompted with that message to let you know that saving the setting will trigger a federation request to the Microsoft domain you currently have selected.
If you were already using Okta as the IDP for your O365 domain and that exact instance of the O365 app, there should be no impact.
If you are currently using another instance of the O365 app, another IDP or no IDP for your O365, those will be overridden.
Another thing to keep in mind is that if you use multiple O365 domains , you will need to check the selected list to ensure you have listed only the ones you want to be federated with Okta.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Help others in the community by liking or hitting Select as Best if this response helped you.