Entra ID fails to verify custom domain in Cloudflare

Question

Entra ID fails to verify custom domain in Cloudflare

Digital Arsitek 0

I have a domain name registered in Cloudflare. However, I cannot use it as Custom Domain name in Entra ID. Entra ID fails to verify domain name (see image below).

I've tried several combinations: registering TXT record only, MX record only, and both in Cloudflare. I also waited for more than 72 hours. In all trials, I confirmed that the DNS records are registered properly in Cloudflare, by cross-checking it on Cloudflare and using third-part DNS checker such as https://dnschecker.org/. I removed all other DNS records except for the ones requested by Entra ID. The domain name is "xxxxxxxxxx.com"

How can I resolve this issue?

User's image

1 answer

Your answer

Answer 1

Bandela Siri Chandana 3,055 Microsoft External Staff Moderator

Hi @Digital Arsitek
I understand that you are verifying custom domain in Cloudflare, and you are unable to verify domain name.

You need to ensure that whether you have added the record above registrar:

The domain that you added was purchased from Cloudflare or a separate domain registrar. To verify and create DNS records for your domain in Microsoft 365, you first need to change the nameservers at your domain registrar so that they use the Cloudflare nameservers.

To change your domain's name servers at your domain registrar's website yourself, follow these steps.

Find the area on the domain registrar's website where you can edit the nameservers for your domain.
Either create two nameserver records by using the values in the following table or edit the existing nameserver records so that they match the values.
Save your changes.

When you've added the record at your domain registrar's site, you'll go back to Microsoft and search for the record. When Microsoft finds the correct TXT record, your domain is verified.

Follow the document for more information: https://learn.microsoft.com/en-us/microsoft-365/admin/dns/create-dns-records-at-cloudflare?view=o365-worldwide

Hope this helps. Do let us know if you have any further queries.

If this answers your query, do click `Accept Answer` and `Yes`.

Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2025-03-20T06:21:18.9666667+00:00

Hi @Digital Arsitek
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes, if you have any further query do let us know.
Bandela Siri Chandana 3,055 Reputation points Microsoft External Staff Moderator

2025-03-21T05:06:45.1233333+00:00

Hi @Digital Arsitek
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes, if you have any further query do let us know.
Digital Arsitek 0 Reputation points

2025-03-28T23:52:26.05+00:00

I am not trying to create DNS records for my domain in Microsoft 365. I'm trying to use a Custom Domain name in Azure Entra ID, such that I can create new user accounts in Azure Entra ID using the Custom Domain name as suffix.
Digital Arsitek 0 Reputation points

2025-03-28T23:57:52.56+00:00

This video shows exactly what I'm trying to do. https://www.youtube.com/watch?v=rr3XbRCfoRc

In my case, though, the verification step fails. Any suggestion?
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2025-03-31T16:31:05.2+00:00
Hello @Digital Arsitek,

Thank you for your response.

Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records in Cloudflare.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

Common verification issues

First, let's check if your custom domain has already been verified in another Entra directory. You can do this by entering your domain name in the following URL to retrieve the tenant ID where it is verified:

https://www.whatismytenantid.com/

Once you have the tenant ID, verify whether it belongs to your tenant. If the tenant ID is different and you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Custom domain Name:

Your tenant ID:

Contact Email address:

Contact Phone Number:

Country

TimeZone

Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.
Mike N 0 Reputation points

2025-06-25T12:30:11.8366667+00:00

@Raja Pothuraju I have this exact issue but I believe the tenant that the domain was validated on I can no longer access as it was associated with a previous company's email.

Are you able to assist with helping to remove the approval?

I can provide the details. Please let me know the best path to get this resolve.

Thank you.

-Mike
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2025-06-25T12:57:06.7733333+00:00

Hello Mike N,

I recommend creating a new thread on the same Q&A forum with as many details about your issue as possible. This will ensure better visibility within the community.

Please create a new Q&A post at https://learn.microsoft.com/en-us/answers/questions/ask/ and select the Microsoft Entra ID tag when submitting your question.
Mike N 0 Reputation points

2025-06-25T14:01:38.8866667+00:00

Will do,

Thank you!

-Mike

Share via

Entra ID fails to verify custom domain in Cloudflare

1 answer

Your answer