Workflows to update ENtraID ObjectGuid into the Okta Microsoft External Authentication Method (EAM) Application

associateEntraidObjectguidIntoOktaUd.flow (30.2 KB)

i everyone,

I ran into an issue while trying to update the Microsoft User ID (microsoftUserId) on an app assignment using Okta Workflows, following the official documentation.

:cross_mark: Issue

When using a Compose card to build the payload like this:

{
  "microsoftUserId": "ObjectID"
}

and passing that into Update Application Profile for Assigned User, the call fails with:

Api validation failed: assignment
Microsoft User ID must be a valid UUID

Even though the value being passed is a valid GUID (from Entra ID Object ID).

:white_check_mark: Root Cause

The Workflows card already provides a generated field for Microsoft User ID, so it expects a raw string value, not a JSON object.

Using a Compose card wraps/transforms the value, causing validation to fail.

:white_check_mark: Fix

Pass the Entra Object ID directly into the “Microsoft User ID” field in the card:

  • No Compose

  • No JSON wrapper

  • Just the GUID string (e.g. 33dabae1-0197-4df8-bb0c-6c19cc70b69b)

  • Attached a copy of the flow.

Thank you.

Michele