-
Title
OneLogin - Configuring Multiple Microsoft 365 Tenants or Domains within one OneLogin account -
Description
Customers operating under a single Microsoft 365 tenant with multiple domains, or operating across multiple Microsoft 365 tenants (such as subsidiaries), might need to link them to the same OneLogin account for independent authentication and user provisioning while providing users with the same experience.
-
Cause
Applies to companies acquisitions or merges where one Office 365 app connector only can not integrate with different Office 365 domains.
-
Resolution
OneLogin fully supports multiple Microsoft 365 tenants by configuring multiple Office 365 V2 applications. Each application connects to a different tenant and domain.
Key Points:
- You can create multiple Office 365 V2 apps in OneLogin.
- Each app:
- Uses a different Microsoft tenant
- Is tied to a unique domain
- Has its own SSO and provisioning configuration
- All tenants can coexist within the same OneLogin account.
Configuration Steps
1. Configure Separate Office 365 V2 Apps
Create a dedicated Office 365 V2 application in OneLogin for each Microsoft 365 tenant or domain.
2. Enable User Provisioning per Tenant
Provision users independently into each tenant using the corresponding Office 365 V2 app.
3. Automate User Assignment and Movement
Once both tenants are operational:
- Review Roles to control access
- Configure Mappings to automate user placement (for example, moving users from an existing domain to a new tenant)
📘 References:
-
Additional Information
There is no enforced limit on the number of Office 365 apps in OneLogin. Each Office 365 app must use unique tenant credentials and domains. Plan role and mapping logic carefully when migrating users between tenants.