Provisioning options for Office 365

This topic explains different provisioning options available for an Office 365 app instance in Okta.

 

Operations supported	Provisioning options
	Licenses and Roles Management Only	Profile Sync	User Sync	Universal Sync1Universal Sync does not support JIT-enabled Active Directory instances.
Provision Users
Push licenses and roles	Y	Y	Y	Y
Create user	N	Y	Y	Y
Deactivate user	Y	Y	Y	Y
Edit user directly from within Office 365	Y2Not available with Azure Active Directory Connect or Directory Synchronization.	Y	N3Users can no longer be edited directly from within Office 365. Changes must occur at the source of truth and be synced across.	N4Users can no longer be edited directly from within Office 365. Changes must occur at the source of truth and be synced across.
Sync profile attributes5See Supported user profile attributes for Office 365 provisioning.
Sync basic user profile attributes	N	Y	Y	Y
Sync limited number of extended attributes in addition to the basic attributes	N	N	Y	Y
Sync all extended attributes	N	N	N	Y
Sync AD groups and resources6To sync groups from other directory services and apps to Office 365, configure Group Push. You must first configure provisioning and user assignments before pushing groups to Office 365. See Using Group Push.
Sync security groups	N	N	N	Y
Sync contacts	N	N	N	Y
Sync distribution lists	N	N	N	Y
Sync resource mailboxes	N	N	N	Y