PedroC.80530 (Customer) asked a question.
Okta to Microsoft Office 365 integration
Hi,
Is it possible to confirm the configuration we need to set up so that we can assign and remove MS365 licenses for users via Okta when we provision or deprovision them in the designated Okta group?
We have the Microsoft Office 365 application created in Okta, and it is working correctly whenever a new user is added, they are also created in the Microsoft 365 Admin Center.
We want Okta to assign the Microsoft 365 Business Standard license whenever a new user is added to this group.
We also want Okta to remove the Microsoft 365 Business Standard license whenever a user is removed from this group.
Questions:
- In Okta, which Office 365 Provisioning Type should we select?
- In Microsoft Office 365 Attribute Mappings, what should be the attribute condition for licenses?
Thanks!
Hello @PedroC.80530 (Customer) , thank you for contacting Okta Community.
You can assign different licenses for the Office365 app using Okta group assignments. This article covers how to assign and edit these licenses:
Manage Office 365 licenses and roles
Once you configure several groups with different licenses, you can simply assign the app through the correct group for each user. They should receive the right license.
Regards.
--
Help others in the community by liking or hitting Select as Best if this response helped you.
Hi Diana,
We have already setup all that we need from the Okta Guides / articles.
We have already set up everything we need from the Okta guides and articles.
We have the mapping, licenses, and user group assignments configured for over a year. However, in recent months, we've noticed that when we add a user to the Microsoft 365 group, they are not automatically assigned an M365 Business Premium license. The license assignment does not happen automatically, and we have to do it manually in the Microsoft 365 Admin Center.
Additionally, when we off-board a user and they are removed from the Okta group "Microsoft 365", their access to MS365 is blocked, but the license remains assigned in Microsoft 365.
Access to MS365 applications via Okta works perfectly. Our issue is with license assignment and removal through Okta.
Could you check if this is an issue or if there's something we need to adjust in our setup?
What information do you need from my side?
Thanks
Hello @PedroC.80530 (Customer) , thank you for the additional information.
When assigning licenses, there can be a delay between Okta and Microsoft of a few seconds up to a few minutes. That is expected behavior and not a consequence of your setup. However, if the license is still not assigned after 10 minutes or more, it could be an issue with the setup.
In order to diagnose the issue and remediate it, one of our engineers would need to take a closer look at your setup, which would require a support ticket.
I've brought up your question with some of our colleagues who are more experienced with Microsoft integrations. In order to automatically remove Microsoft licenses from the Okta side, you would need to request a feature flag to be enabled. Feature flag requests are done through a support ticket. Before that, you should discuss this with your Account Executive, as some feature flags can come with additional costs.
Opening a support ticket is a feature only available to paid accounts and require a Customer Support Account ID. If you do not have a paid account but are interested in upgrading, you can contact our Sales team.
Regards.
--
Help others in the community by liking or hitting Select as Best if this response helped you.