Azure AD custom domain fails to verify

Question

Azure AD custom domain fails to verify

David Cordero 0

I added a custom domain to my entra id. However it fails to verify even after 72 hours.
On command prompt i am retrieving the correct information:

C:\Users\DCordero>nslookup -q=TXT azureaddemo.com

Server: cdns01.comcast.net

Address: 2001:558:feed::1

Non-authoritative answer:

azureaddemo.com text =

    "MS=ms31999946"

Using https://mxtoolbox.com i can also verify my domain to be successfully published.

However when I try to verify i keep getting Failed to verify domain. User's image

JimmySalian-2011 42,511 Reputation points

2025-04-21T13:14:18.9933333+00:00

Hi David,

Usually the time is 24 to 48 hours for verification, sometimes might take more but as it is more than 72 hours. I will suggest to raise a support ticket with Microsoft - https://azure.microsoft.com/en-ca/support/create-ticket/

Hope this helps.

JS
Jose Benjamin Solis Nolasco 3,511 Reputation points

2025-04-21T13:20:31.19+00:00
Hello David,

Just in case follow this guide https://learn.microsoft.com/en-us/entra/fundamentals/add-custom-domain

Confirm the DNS TXT Record is Correctly Configured

Accurate Record Value: When you added your domain to Entra ID, you received a TXT record value (e.g., "MS=ms31999946"). Make sure that:

The TXT record value is entered exactly as provided, without any unintended extra spaces or quotes (some DNS providers handle quotes differently).

There are no leading or trailing whitespace characters.

😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!
David Cordero 0 Reputation points

2025-04-21T14:35:31.6333333+00:00

Thanks Jimmy
Found out that my free subscription did not allow me to create a new tenant to tie to my custom domain. I cancel the subscription and I am using another azure subscription that I have.
Raja Pothuraju 23,790 Reputation points Microsoft External Staff Moderator

2025-04-21T15:29:57.07+00:00
Hello @David Cordero,

Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records in your domain provider side.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

Common verification issues

First, let's check if your custom domain has already been verified in another Entra directory. You can do this by entering your domain name in the following URL to retrieve the tenant ID where it is verified:

https://www.whatismytenantid.com/

Once you have the tenant ID, verify whether it belongs to your tenant. If the tenant ID is different and you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Custom domain Name:

Your tenant ID:

Contact Email address:

Contact Phone Number:

Country

TimeZone

Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.
Raja Pothuraju 23,790 Reputation points Microsoft External Staff Moderator

2025-04-24T21:31:25.9033333+00:00

Hello @David Cordero,

I just wanted to check if you'd be interested in taking this offline to get this resolved. Please share the necessary details in private message so I can proceed with engaging the Data Protection team.
Raja Pothuraju 23,790 Reputation points Microsoft External Staff Moderator

2025-05-04T22:05:07.1866667+00:00

Hello @David Cordero,

I just wanted to check if you'd be interested in taking this offline to get this resolved. Please share the necessary details in private message so I can proceed with engaging the Data Protection team.

Your answer

JimmySalian-2011 42,511 Reputation points

2025-04-21T13:14:18.9933333+00:00

Hi David,

Usually the time is 24 to 48 hours for verification, sometimes might take more but as it is more than 72 hours. I will suggest to raise a support ticket with Microsoft - https://azure.microsoft.com/en-ca/support/create-ticket/

Hope this helps.

JS
Jose Benjamin Solis Nolasco 3,511 Reputation points

2025-04-21T13:20:31.19+00:00

Hello David,

Just in case follow this guide https://learn.microsoft.com/en-us/entra/fundamentals/add-custom-domain

Confirm the DNS TXT Record is Correctly Configured

Accurate Record Value: When you added your domain to Entra ID, you received a TXT record value (e.g., "MS=ms31999946"). Make sure that:

The TXT record value is entered exactly as provided, without any unintended extra spaces or quotes (some DNS providers handle quotes differently).

There are no leading or trailing whitespace characters.

😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!
David Cordero 0 Reputation points

2025-04-21T14:35:31.6333333+00:00

Thanks Jimmy
Found out that my free subscription did not allow me to create a new tenant to tie to my custom domain. I cancel the subscription and I am using another azure subscription that I have.
Raja Pothuraju 23,790 Reputation points Microsoft External Staff Moderator

2025-04-21T15:29:57.07+00:00

Hello @David Cordero,

Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records in your domain provider side.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

Common verification issues

First, let's check if your custom domain has already been verified in another Entra directory. You can do this by entering your domain name in the following URL to retrieve the tenant ID where it is verified:

https://www.whatismytenantid.com/

Once you have the tenant ID, verify whether it belongs to your tenant. If the tenant ID is different and you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Custom domain Name:

Your tenant ID:

Contact Email address:

Contact Phone Number:

Country

TimeZone

Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.
Raja Pothuraju 23,790 Reputation points Microsoft External Staff Moderator

2025-04-24T21:31:25.9033333+00:00

Hello @David Cordero,

I just wanted to check if you'd be interested in taking this offline to get this resolved. Please share the necessary details in private message so I can proceed with engaging the Data Protection team.
Raja Pothuraju 23,790 Reputation points Microsoft External Staff Moderator

2025-05-04T22:05:07.1866667+00:00

Hello @David Cordero,

I just wanted to check if you'd be interested in taking this offline to get this resolved. Please share the necessary details in private message so I can proceed with engaging the Data Protection team.

Share via

Azure AD custom domain fails to verify

Your answer