Recently had to set up Okta assign some O365 licenses. I wasn’t aware at that time, that this also requires me to manage all the Azure AD roles thru Okta as well. This is a pain in the ass.