I get the same error when using the SSO Integration option for Office 365 (Beta). It looks like immutableID claim is not being sent as an outbound claim. When using the Office 365 (Beta) connector, is there an option to configure claims mapping? Or is that only available using a WS-Fed application? Ref: Configure WS-Fed Applications (auth0.com)