Provisioning options for Office 365

This topic explains different provisioning options available for an Office 365 app instance in Okta.

Operations supported	Licenses and Roles Management Only	Profile Sync	User Sync	Universal Sync1 Universal Sync doesn't support JIT-enabled Active Directory instances.
Provision Users
Push licenses and roles	Y	Y	Y	Y
Create user	N	Y	Y	Y
Deactivate user	Y	Y	Y	Y
Edit user directly from within Office 365	Y2 Not available with Microsoft Entra ID Connect or Directory Synchronization.	Y	N3 Users can no longer be edited directly from within Office 365. Changes must happen at the source of truth and be synced across.	N4 Users can no longer be edited directly from within Office 365. Changes must occur at the source of truth and be synced across.
Sync profile attributes5 See Supported user profile attributes for Office 365 provisioning.
Sync basic user profile attributes	N	Y6 Username can't be changed via Profile Sync.	Y	Y
Sync limited number of extended attributes in addition to the basic attributes	N	N	Y	Y
Sync all extended attributes	N	N	N	Y
Sync Active Directory groups and resources7 To sync groups from other directory services and apps to Office 365, configure Group Push. You must first configure provisioning and user assignments before pushing groups to Office 365. See Using Group Push.
Sync security groups	N	N	N	Y
Sync contacts	N	N	N	Y
Sync distribution lists	N	N	N	Y
Sync resource mailboxes	N	N	N	Y