Microsoft covers how to properly terminate a user in Office 365 here:Īlthough this function isn’t designed for Tenant-To-Tenant migrations, I suggest using this function in all Tenant-To-Tenant migration projects. (In fact it only took 3 minutes when I tested it while writing this article.) This sign-out process takes up to an hour according to the documentation, but I can attest it usually takes less than 15 minutes. If you don’t do this, and the user is logged in on a device somewhere, they will not get kicked out of Office 365 right away, including the OneDrive For Business Sync Client and Microsoft Teams. The designed use is to “immediately” revoke a user’s access when they are terminated. This action is accomplished by using the “Initiate Sign-Out” link in the user account information in the Office 365 Admin Centre, or in PowerShell. This does not replace the need for a desktop agent, but it certainly can prevent the user from having a valid session token and being in the old tenant all alone. This procedure will help automate the steps needed on Office Mobile and the computers for which you do not have a reconfiguration agent installed on. In conjunction with this process, I also advocate for revoking login tokens prior to doing the reconfiguration and identifying the ejection / switchover.

It is the only way to get full control over the user’s computer and reconfigure the end point at the right time, and reduce help desk volumes. At Quadrotech, during my day job, we have a reconfiguration agent that performs these actions as recommended by Microsoft. This is regardless of whether you are moving the user’s domain or not. When migrating users from one tenant to another, the end user’s Office install will need to be reconfigured.

How to sign out of office 365