Logging into Office 365 via Okta gives an error

Products

• CASB Security Premium
• CASB Gateway
• CASB Gateway Advanced

Issue/Introduction

Configured Mirror Gateway to work with Okta and Office 365.  The following error is shown after providing the Okta credentials:

 

Cause

Unlike other SaaS, Office 365 requires an immutableID to be passed as an Okta attribute instead of username.

Resolution

To resolve this add an attribute to the Okta SAML response with the following information.

MIGNameID     Unspecified     user.office365_immutableId

You will need to type in user.office365_immutableId as it will not show up in the drop down.