Issues Verifying Primary Domain in Microsoft Entra ID

Question

Issues Verifying Primary Domain in Microsoft Entra ID

Soma Yarlagadda 0

Unable to verify the primary domain after successfully setting the TXT record on the domain registrar. The TXT record exists, as confirmed by accessing it through whatmydns.com for the custom domain.

Venkata Jagadeep 1,005 Reputation points Microsoft External Staff

2025-03-26T22:32:35.2433333+00:00

Hello Soma Yarlagadda,

If Entra ID can't verify a custom domain name, try the following suggestions:

Wait at least an hour and try again. DNS records must propagate before Entra ID can verify the domain. This process can take an hour or more.

If you are trying to verify a child domain, verify the parent domain first. Make sure the parent domain is created and verified first before you try to verify child domain.

Make sure the DNS record is correct. Go back to the domain name registrar site.

Make sure the entry is there, and that it matches the DNS entry information provided by Entra ID.

If you can't update the record on the registrar site, share the entry with someone who has permissions to add the entry and verify it's correct.

Make sure the domain name isn't already in use in another directory. A domain name can only be verified in one directory. If your domain name is currently verified in another directory, it can't also be verified in the new directory. To fix this duplication problem, you must delete the domain name from the old directory. For more information about deleting domain names, see Manage custom domain names.

Make sure you don't have any unmanaged Power BI tenants. If your users have activated Power BI through self-service sign-up and created an unmanaged tenant for your organization, you must take over management as an internal or external admin, using PowerShell. For more information, see Take over an unmanaged directory as administrator in Entra ID.

Source :- https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain
Venkata Jagadeep 1,005 Reputation points Microsoft External Staff

2025-03-27T16:43:11.3733333+00:00

Hello Soma Yarlagadda,

Did you get a chance to verify the details shared in my previous comment. Please confirm if the domain is verified in any other tenant earlier. We cannot verify a domain in two tenants simultaneously. Also share us the error while you are verifying the domain in the Entra ID portal.
Soma Yarlagadda 0 Reputation points

2025-03-27T22:14:11.1+00:00

Hi Venkata Jagdeep, yes I have tried all the above troubleshooting tips, but couldn't get the domain verified. Here is the error I am receiving

There is another txt record that was added for Outlook SPF protection. Do you think that is causing any issue with the verification?
Venkata Jagadeep 1,005 Reputation points Microsoft External Staff

2025-03-28T00:03:29.7133333+00:00

Hello Soma Yarlagadda,

Thank you for providing the information.

I request you to remove the screenshot of the error which is showing your domain name.

This MX record's Priority must be the highest of all existing MX records for the domain. Otherwise, it can interfere with sending and receiving email. You should delete this record as soon as domain verification is complete.

May be it is conflicting with the MX record which you have added for outlook SPF protection.

I suggest you to delete the DNS record from Entra ID and registrar website and try to verify with MX record as shown in below screenshot

Make sure that the fields are set to the following values:

Record Type: MX

Priority: Set to any large value not used already.

Host Name: @

Points to address: Copy the value from the admin center and paste it here.

TTL: 3600

When Microsoft finds the correct MX record, your domain is verified.

Reference

https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider?view=o365-worldwide#verify-with-an-mx-record
Venkata Jagadeep 1,005 Reputation points Microsoft External Staff

2025-03-28T19:14:40.8033333+00:00

Hello Soma Yarlagadda,

Did you get a chance to add MX record in your domain registrar and verify it.

I have sent you email with few queries. Please share that information through email for further troubleshooting on this issue.
Venkata Jagadeep 1,005 Reputation points Microsoft External Staff

2025-03-31T04:07:54.0066667+00:00

Hello Soma Yarlagadda,

Please share us the information that was asked in private message and email.

This will help us to raise a support ticket with Data Protection team to verify the ownership of the tenant to successfully register the domain in your tenant. Request you to share information only through private message or email.
SrideviM 2,065 Reputation points Microsoft External Staff

2025-04-03T00:58:45.1266667+00:00

Hello Soma Yarlagadda,

Just following up to check if you were able to add the MX record and whether the domain verification is still giving you trouble. If you’re still experiencing issues, please feel free to share an update here and also send the requested details in a private message or email so we can proceed with escalating this to the Data Protection team if necessary.

Your answer

Venkata Jagadeep 1,005 Reputation points Microsoft External Staff

2025-03-26T22:32:35.2433333+00:00

Hello Soma Yarlagadda,

If Entra ID can't verify a custom domain name, try the following suggestions:

Wait at least an hour and try again. DNS records must propagate before Entra ID can verify the domain. This process can take an hour or more.

If you are trying to verify a child domain, verify the parent domain first. Make sure the parent domain is created and verified first before you try to verify child domain.

Make sure the DNS record is correct. Go back to the domain name registrar site.

Make sure the entry is there, and that it matches the DNS entry information provided by Entra ID.

If you can't update the record on the registrar site, share the entry with someone who has permissions to add the entry and verify it's correct.

Make sure the domain name isn't already in use in another directory. A domain name can only be verified in one directory. If your domain name is currently verified in another directory, it can't also be verified in the new directory. To fix this duplication problem, you must delete the domain name from the old directory. For more information about deleting domain names, see Manage custom domain names.

Make sure you don't have any unmanaged Power BI tenants. If your users have activated Power BI through self-service sign-up and created an unmanaged tenant for your organization, you must take over management as an internal or external admin, using PowerShell. For more information, see Take over an unmanaged directory as administrator in Entra ID.

Source :- https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain
Venkata Jagadeep 1,005 Reputation points Microsoft External Staff

2025-03-27T16:43:11.3733333+00:00

Hello Soma Yarlagadda,

Did you get a chance to verify the details shared in my previous comment. Please confirm if the domain is verified in any other tenant earlier. We cannot verify a domain in two tenants simultaneously. Also share us the error while you are verifying the domain in the Entra ID portal.
Soma Yarlagadda 0 Reputation points

2025-03-27T22:14:11.1+00:00

Hi Venkata Jagdeep, yes I have tried all the above troubleshooting tips, but couldn't get the domain verified. Here is the error I am receiving

There is another txt record that was added for Outlook SPF protection. Do you think that is causing any issue with the verification?
Venkata Jagadeep 1,005 Reputation points Microsoft External Staff

2025-03-28T00:03:29.7133333+00:00

Hello Soma Yarlagadda,

Thank you for providing the information.

I request you to remove the screenshot of the error which is showing your domain name.

This MX record's Priority must be the highest of all existing MX records for the domain. Otherwise, it can interfere with sending and receiving email. You should delete this record as soon as domain verification is complete.

May be it is conflicting with the MX record which you have added for outlook SPF protection.

I suggest you to delete the DNS record from Entra ID and registrar website and try to verify with MX record as shown in below screenshot

Make sure that the fields are set to the following values:

Record Type: MX

Priority: Set to any large value not used already.

Host Name: @

Points to address: Copy the value from the admin center and paste it here.

TTL: 3600

When Microsoft finds the correct MX record, your domain is verified.

Reference

https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider?view=o365-worldwide#verify-with-an-mx-record
Venkata Jagadeep 1,005 Reputation points Microsoft External Staff

2025-03-28T19:14:40.8033333+00:00

Hello Soma Yarlagadda,

Did you get a chance to add MX record in your domain registrar and verify it.

I have sent you email with few queries. Please share that information through email for further troubleshooting on this issue.
Venkata Jagadeep 1,005 Reputation points Microsoft External Staff

2025-03-31T04:07:54.0066667+00:00

Hello Soma Yarlagadda,

Please share us the information that was asked in private message and email.

This will help us to raise a support ticket with Data Protection team to verify the ownership of the tenant to successfully register the domain in your tenant. Request you to share information only through private message or email.
SrideviM 2,065 Reputation points Microsoft External Staff

2025-04-03T00:58:45.1266667+00:00

Hello Soma Yarlagadda,

Just following up to check if you were able to add the MX record and whether the domain verification is still giving you trouble. If you’re still experiencing issues, please feel free to share an update here and also send the requested details in a private message or email so we can proceed with escalating this to the Data Protection team if necessary.

Share via

Issues Verifying Primary Domain in Microsoft Entra ID

Your answer