Supported user profile attributes for Office 365 provisioning
Attributes marked with * require Active Directory integration and must be sourced from the user's on-premises Active Directory profile.
Changing a user's User Principal Name (UPN) in Okta for an Office 365 app causes the user to be deprovisioned and then reprovisioned in Azure Active Directory. This process may lead to an error, as it attempts to create a user that already exists. To avoid this issue when updating a user's UPN for Office 365, directly edit the Username field in the user's Okta profile by going to .
The following user profile attributes are supported for each provisioning type. These attributes only apply when provisioning Office 365 from Okta to Azure Active Directory. They don't apply to Office 365 users who have been imported from Azure Active Directory to Okta.
Profile sync
|
Country code Display name First name Last name |
User sync
User sync includes all profile sync attributes, and the following:
|
City Country Department Fax number Manager* Middle name |
Mobile phone Office Preferred Language Primary email State Street address |
Telephone Title UsageLocation Username Zip Code |
Universal sync
Attributes marked with ** aren't synchronized by default. To sync these attributes successfully, contact Okta Support.
All profile and user Sync attributes, and the following:
|
Alias Assistant* AuthOrig* CommonName Company CountryLetterCode Description DLMemRejectPerms* DLMemSubmitPerms* ExtensionAttribute1 ExtensionAttribute2 ExtensionAttribute3 ExtensionAttribute4 ExtensionAttribute5 ExtensionAttribute6 ExtensionAttribute7 ExtensionAttribute8 ExtensionAttribute9 ExtensionAttribute10 ExtensionAttribute12 ExtensionAttribute13 ExtensionAttribute14 ExtensionAttribute15 HomePhone Info Initials InternetEncoding IPPhone LastPasswordChangeTimestamp LegacyExchangeDN Manager* MSDSHABSeniorityIndex MSDSPhoneticDisplayName MSExchArchiveGuid MSExchArchiveName |
MSExchAssistantName MSExchAuditAdmin MSExchAuditDelegate MSExchAuditDelegateAdmin MSExchAuditOwner MSExchBlockedSendersHash MSExchBypassAudit MSExchDelegateListLink* MSExchElcExpirySuspensionEnd MSExchElcExpirySuspensionStart MSExchElcMailboxFlags MSExchEnableModeration MSExchExtensionCustomAttribute1 MSExchExtensionCustomAttribute2 MSExchExtensionCustomAttribute3 MSExchLitigationHoldOwner MSExchMailboxGuid MSExchMailboxAuditEnable MSExchMailboxAuditLogAgeLimit MSExchModeratedByLink* MSExchModerationFlags MSExchRecipientDisplayType MSExchRecipientTypeDetails MSExchRemoteRecipientType MSExchRequireAuthToSendTo MSExchResourceCapacity MSExchResourceDisplay MSExchResourceMetadata MSExchExtensionCustomAttribute4 MSExchExtensionCustomAttribute5 MSExchHideFromAddressLists MSExchImmutableId MSExchLitigationHoldDate |
MSExchResourceSearchProperties MSExchRetentionComment MSExchRetentionUrl MSExchSafeRecipientsHash MSExchSafeSendersHash MSExchSenderHintTranslations MSExchTeamMailboxExpiration MSExchTeamMailboxOwners* MSExchTeamMailboxSharePointLinkedBy* MSExchTeamMailboxSharePointUrl MSExchUserHoldPolicies MSRtcSipApplicationOptions MSRtcSipDeploymentLocator MSRtcSipLine MSRtcSipOwnerUrn MSRtcSipPrimaryUserAddress MSRtcSipUserEnabled MSRtcSipOptionFlags OnPremiseSecurityIdentifier OtherFacsimileTelephoneNumber OtherHomePhone OtherIPPhone OtherMobile OtherPager OtherTelephone onPremisesSamAccountName** onPremisesDomainName** onPremisesUserPrincipalName** Pager PostOfficeBox ProxyAddresses PublicDelegates* TargetAddress TelephoneAssistant UnauthOrig* URLUserCertificate Username UserSMIMECertificateWwwHomepage |