This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(272, 55.00000000000001%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EO%3C/text%3E%3C/svg%3E)
I am trying to associate verified Microsoft Partner Center (MPN) account with my Azure AD application. I already have MPN ID and it was authorized.
When I go to "Branding & properties" and add MPN ID to the already created application, it gives me the error:
"This capability is not supported in an email-verified tenant."
The domain under "Custom domain names" which is under "Azure Active Directory" shows as "verified".
Please help how do I fix this so I can add MPN ID successfully?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EGM%3C/text%3E%3C/svg%3E)
@OEC Thank you for reaching out to us, As I understand you are trying to associate verified MPN account with your Azure AD application, in the process you are getting an error "This capability is not supported in an email-verified tenant."
Reviewed your comments from this post34email-verified-tenant34-error-when-attempting-to.html, you mentioned domain is verified and the verification was done by uploading a file with a code to ".well-known" folder on the web server.
Would request you to follow the steps mentioned here https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain to verify the custom domain in Azure via TXT record and verify the issue.
Let me know if you have any further questions.
Thank you for your reply.
I went through the link you have provided. I know how to add TXT record but I see no place in Azure portal interface to initiate this process of adding a TXT record.
I am logged in as a certain tenant. Let's call it abc@ssss .com - that is already also a verified MPN ID username on partner.microsoft.com.
Then I go to portal.azure.com and log in with abc@ssss .com. It shows abc@ssss .com and example.com in the upper right corner as logged in user.
Under the section "Azure Active Directory" -> "Custom Domain Names" the button "+ Add custom domain" is greyed out so I can't add new custom domains.
The ones which are pre-added are - example.com (shows "Verified" with green checkmark) and example.onmicrosoft.com - "Available" and checked as "Primary".
If I click into example.com it shows:
Type: Custom
Status: Verified
Federated: No
Primary domain: No
The "Make primary" button and "Delete" are both greyed out.
As much as I'd like to add a TXT record, I can't find any place where to go to start adding it from the portal.azure.com page.
From what I understand this may have been asked during the initial signup process to partner.microsoft.com but I can't be sure as the whole process took days.
Please clarify - is it possible to add TXT record for a domain which is already "Verified" which I assume causes this problem?
@Givary-MSFT Thank you for your reply.
I have examined your suggested steps and I am otherwise well familiar with the TXT records for the domain and how to edit them.
The trouble is - I can't find a place where to start this process of adding TXT record in the portal.azure.com
The guide which you have provided shows a process of adding a new domain under "Custom domain names". However, in my case:
if I click into example.com - the buttons "make primary" and "delete" on top are greyed out and the domain status is - type=custom, federated=no, status=verified, primary domain=no
So I can't click anywhere to "edit" the domain and view the TXT record that Azure AD wants me to add in my domain.
I have used this domain to sign up to partner.microsoft.com to get MPN ID (the email username is identical for MPN page and Azure Portal page), so I fear that I might have to redo the whole process and be careful if it asks me to verify TXT record somewhere as I might have chosen "email verification" but I really can't remember that such choice was even shown.
Any thought please?
I also wanted to add that I tried to add custom domain using the login name hotmail.com (another login name), and there the add domain button is not greyed and it does show the "TXT" options but that is not the tenant which is approved in MPN ID. There may have been a problem with the approval process that they added domain as "email verified" maybe?
I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others", I'll repost your solution in case you'd like to "Accept" the answer.
Answered by @OEC
Thank you once again - one question though. Do I have to keep the TXT record for the domain after initial approval or can I remove it now that it was approved?
@OEC you have to keep the txt record.
I think I solved this problem. Under the partner.microsoft.com - I had to go to "User Management" and then click a link to become administrator and owner. Once I did that, it presented a screen with the TXT value for DNS entry and after I added it and it converted the account into "Account admin, Referrals admin, MPN partner admin, Owner"
Then I was able to add verified MPN ID to the application created in the portal.azure.com and now it shows verified badge.
So thank you for helping - no answer is needed for this any more, but this process could certainly be much easier than it is, it is very unintuitive as it is IMHO.