Cannot verify domain

Question

Cannot verify domain

IP 20

I try to verify domain and created the appropriate TXT record.

When I click Verify button I get the error, that the domain is used by another active tenant.

I am the owner of the domain and have no clue what other tenant uses it. I need a way to forcibly disconnect it from another tenant, or at least get the information in what tenant it's registered to delete it.

Below is the server response

{"ClassName":"Microsoft.Portal.Framework.Exceptions.ClientException","Message":"Graph call failed with httpCode=BadRequest, errorCode=Request_BadRequest, errorMessage=Domain verification failed with the following error: 'Domain is being used by an active tenant'., reason=Bad Request, correlationId = bab8526e-1aa8-4f3f-81d7-5d324cfd700d, response = {\"odata.error\":{\"code\":\"Request_BadRequest\",\"message\":{\"lang\":\"en\",\"value\":\"Domain verification failed with the following error: 'Domain is being used by an active tenant'.\"},\"requestId\":\"371ef63c-a05c-4c52-8f7b-8b16d7dd6534\",\"date\":\"2025-04-23T13:42:29\",\"values\":[{\"item\":\"PropertyName\",\"value\":\"Name.Conflict\"},{\"item\":\"PropertyErrorCode\",\"value\":\"DomainInUse\"}]}}","Data":{},"HResult":-2146233088,"XMsServerRequestId":null,"Source":null,"HttpStatusCode":400,"ClientData":{"errorCode":"DomainInUse","localizedErrorDetails":{"errorDetail":"Domain verification failed with the following error: 'Domain is being used by an active tenant'."},"operationResults":null,"timeStampUtc":"2025-04-23T13:42:29.9053471Z","clientRequestId":"bab8526e-1aa8-4f3f-81d7-5d324cfd700d","internalTransactionId":"333d6f3b-e8c0-4429-bc1c-e23113a48e8d","tenantId":null,"userObjectId":"12dd2b1b-ccb2-4cb2-ae77-4298ebf3a37c","exceptionType":"AADGraphException"}}

SINGAPERUMAL.B 5 Reputation points

2025-04-23T15:41:54.4633333+00:00

{"ClassName":"Microsoft.Portal.Framework.Exceptions.ClientException","Message":"Graph call failed with httpCode=BadRequest, errorCode=Request_BadRequest, errorMessage=Domain verification failed with the following error: 'Domain is being used by an active tenant'., reason=Bad Request, correlationId = bab8526e-1aa8-4f3f-81d7-5d324cfd700d, response = {"odata.error":{"code":"Request_BadRequest","message":{"lang":"en","value":"Domain verification failed with the following error: 'Domain is being used by an active tenant'."},"requestId":"371ef63c-a05c-4c52-8f7b-8b16d7dd6534","date":"2025-04-23T13:42:29","values":[{"item":"PropertyName","value":"Name.Conflict"},{"item":"PropertyErrorCode","value":"DomainInUse"}]}}","Data":{},"HResult":-2146233088,"XMsServerRequestId":null,"Source":null,"HttpStatusCode":400,"ClientData":{"errorCode":"DomainInUse","localizedErrorDetails":{"errorDetail":"Domain verification failed with the following error: 'Domain is being used by an active tenant'."},"operationResults":null,"timeStampUtc":"2025-04-23T13:42:29.9053471Z","clientRequestId":"bab8526e-1aa8-4f3f-81d7-5d324cfd700d","internalTransactionId":"333d6f3b-e8c0-4429-bc1c-e23113a48e8d","tenantId":null,"userObjectId":"12dd2b1b-ccb2-4cb2-ae77-4298ebf3a37c","exceptionType":"AADGraphException"}}
Shree Hima Bindu Maganti 4,775 Reputation points Microsoft External Staff Moderator

2025-04-23T16:21:10.14+00:00
Hi @IP
If you encounter an error indicating that the domain is used by another active tenant, it usually means the domain is associated with a different Microsoft 365 or Azure tenant. Unfortunately, you cannot forcibly disconnect the domain from another tenant without proper authorization.:

If the domain is part of an Exchange federation trust, you may need to remove that trust. Use PowerShell with the Get-FederationInformation cmdlet to check for federation trusts.

Reach out to Microsoft Online Services Support. They can identify which tenant is using the domain and guide you on how to remove it from that tenant.

Ensure you have access to the domain's DNS settings to add or modify TXT records as needed.
Can't verify domain error message when you try to verify a domain in Microsoft 365 An error occurred while working on your domain when you verify your domain in a hybrid deployment Troubleshooting domain configuration issues
let us know if you have any further assistances.
IP 20 Reputation points

2025-04-23T16:52:50.6+00:00
@Shree Hima Bindu Maganti ,

Do you mean If someone was able to verify the domain I cannot detach it even if I'm a domain owner and can edit any DNS records?? What if domain owner changes (not my case, but anyway)? Sounds weird

I don't know what is Exchange federation trust and whether the domain is a part of it. I have Powershell 5.1 on my laptop and it doesn't know the command:
PS C:\> Get-FederationInformation Get-FederationInformation : The term 'Get-FederationInformation' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:1 + Get-FederationInformation + ~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : ObjectNotFound: (Get-FederationInformation:String) [], CommandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

Would you mind posting a link to any instruction on how to reach out to MS support? We have a paid Support Plan. I'm stuck with the portal interface and all I could get from all the support links is to create a post MS Q&A !

When I click "Create Support Request" on this portal page: https://portal.azure.com/#view/Microsoft_Azure_Support/HelpAndSupportBlade/~/overview

all I get is a bunch of AI-generated suggestions which do not help in my case.

I do have access to DNS and verified the created records several times. And the error from MS an error not related to DNS.
Navya 19,795 Reputation points Microsoft External Staff Moderator

2025-04-23T19:38:57.6866667+00:00

Hi @IP
I understand that you have concern to create a support request in Azure Portal.
On February 12, 2025, the developer support plan provided a new experience where you receive business hours access to Support Engineers on Microsoft Q&A with prioritized responses, as the first line of support. Microsoft Q&A is our first party question and answer platform where enthusiasts, MVPs, and other community experts can engage.

For details on the SLAs and other benefits provided for each support plan, please see here.

Currently the new experience is only limited to Developer support plan only and for all other support plans, customers can continue to use portal as first engagement mode.

Could you please share the domain name via private messages? This will help us identify where the domain is registered and the associated tenant.
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2025-04-24T06:56:31.21+00:00
Hello @IP,

Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

Common verification issues

First, let's check if your custom domain has already been verified in another Entra directory. You can do this by entering your domain name in the following URL to retrieve the tenant ID where it is verified:

https://www.whatismytenantid.com/

Once you have the tenant ID, verify whether it belongs to your tenant. If the tenant ID is different and you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Custom domain Name:

Your tenant ID:

Contact Email address:

Contact Phone Number:

Country

TimeZone

Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.
IP 20 Reputation points

2025-04-24T16:37:08.55+00:00

How to send a private message?

I don't see such a button when open your user's profile ( I have verified that I'm logged in)
Navya 19,795 Reputation points Microsoft External Staff Moderator

2025-04-24T17:06:54.46+00:00

Hi @IP

You can find the Private messages option under your issue/ask. Please refer to the screenshot below to see where the option is available. Click on private messages, and you will be redirected to private message conversations. Share the requested details there.

Accepted answer

0 additional answers

Your answer

SINGAPERUMAL.B 5 Reputation points

2025-04-23T15:41:54.4633333+00:00

{"ClassName":"Microsoft.Portal.Framework.Exceptions.ClientException","Message":"Graph call failed with httpCode=BadRequest, errorCode=Request_BadRequest, errorMessage=Domain verification failed with the following error: 'Domain is being used by an active tenant'., reason=Bad Request, correlationId = bab8526e-1aa8-4f3f-81d7-5d324cfd700d, response = {"odata.error":{"code":"Request_BadRequest","message":{"lang":"en","value":"Domain verification failed with the following error: 'Domain is being used by an active tenant'."},"requestId":"371ef63c-a05c-4c52-8f7b-8b16d7dd6534","date":"2025-04-23T13:42:29","values":[{"item":"PropertyName","value":"Name.Conflict"},{"item":"PropertyErrorCode","value":"DomainInUse"}]}}","Data":{},"HResult":-2146233088,"XMsServerRequestId":null,"Source":null,"HttpStatusCode":400,"ClientData":{"errorCode":"DomainInUse","localizedErrorDetails":{"errorDetail":"Domain verification failed with the following error: 'Domain is being used by an active tenant'."},"operationResults":null,"timeStampUtc":"2025-04-23T13:42:29.9053471Z","clientRequestId":"bab8526e-1aa8-4f3f-81d7-5d324cfd700d","internalTransactionId":"333d6f3b-e8c0-4429-bc1c-e23113a48e8d","tenantId":null,"userObjectId":"12dd2b1b-ccb2-4cb2-ae77-4298ebf3a37c","exceptionType":"AADGraphException"}}
Shree Hima Bindu Maganti 4,775 Reputation points Microsoft External Staff Moderator

2025-04-23T16:21:10.14+00:00

Hi @IP
If you encounter an error indicating that the domain is used by another active tenant, it usually means the domain is associated with a different Microsoft 365 or Azure tenant. Unfortunately, you cannot forcibly disconnect the domain from another tenant without proper authorization.:

If the domain is part of an Exchange federation trust, you may need to remove that trust. Use PowerShell with the Get-FederationInformation cmdlet to check for federation trusts.

Reach out to Microsoft Online Services Support. They can identify which tenant is using the domain and guide you on how to remove it from that tenant.

Ensure you have access to the domain's DNS settings to add or modify TXT records as needed.
Can't verify domain error message when you try to verify a domain in Microsoft 365 An error occurred while working on your domain when you verify your domain in a hybrid deployment Troubleshooting domain configuration issues
let us know if you have any further assistances.
IP 20 Reputation points

2025-04-23T16:52:50.6+00:00

@Shree Hima Bindu Maganti ,

Do you mean If someone was able to verify the domain I cannot detach it even if I'm a domain owner and can edit any DNS records?? What if domain owner changes (not my case, but anyway)? Sounds weird

I don't know what is Exchange federation trust and whether the domain is a part of it. I have Powershell 5.1 on my laptop and it doesn't know the command:
PS C:\> Get-FederationInformation Get-FederationInformation : The term 'Get-FederationInformation' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again. At line:1 char:1 + Get-FederationInformation + ~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : ObjectNotFound: (Get-FederationInformation:String) [], CommandNotFoundException + FullyQualifiedErrorId : CommandNotFoundException

Would you mind posting a link to any instruction on how to reach out to MS support? We have a paid Support Plan. I'm stuck with the portal interface and all I could get from all the support links is to create a post MS Q&A !

When I click "Create Support Request" on this portal page: https://portal.azure.com/#view/Microsoft_Azure_Support/HelpAndSupportBlade/~/overview

all I get is a bunch of AI-generated suggestions which do not help in my case.

I do have access to DNS and verified the created records several times. And the error from MS an error not related to DNS.
Navya 19,795 Reputation points Microsoft External Staff Moderator

2025-04-23T19:38:57.6866667+00:00

Hi @IP
I understand that you have concern to create a support request in Azure Portal.
On February 12, 2025, the developer support plan provided a new experience where you receive business hours access to Support Engineers on Microsoft Q&A with prioritized responses, as the first line of support. Microsoft Q&A is our first party question and answer platform where enthusiasts, MVPs, and other community experts can engage.

For details on the SLAs and other benefits provided for each support plan, please see here.

Currently the new experience is only limited to Developer support plan only and for all other support plans, customers can continue to use portal as first engagement mode.

Could you please share the domain name via private messages? This will help us identify where the domain is registered and the associated tenant.
Raja Pothuraju 23,465 Reputation points Microsoft External Staff Moderator

2025-04-24T06:56:31.21+00:00

Hello @IP,

Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

Common verification issues

First, let's check if your custom domain has already been verified in another Entra directory. You can do this by entering your domain name in the following URL to retrieve the tenant ID where it is verified:

https://www.whatismytenantid.com/

Once you have the tenant ID, verify whether it belongs to your tenant. If the tenant ID is different and you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Custom domain Name:

Your tenant ID:

Contact Email address:

Contact Phone Number:

Country

TimeZone

Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.
IP 20 Reputation points

2025-04-24T16:37:08.55+00:00

How to send a private message?

I don't see such a button when open your user's profile ( I have verified that I'm logged in)
Navya 19,795 Reputation points Microsoft External Staff Moderator

2025-04-24T17:06:54.46+00:00

Hi @IP

You can find the Private messages option under your issue/ask. Please refer to the screenshot below to see where the option is available. Click on private messages, and you will be redirected to private message conversations. Share the requested details there.

Answer 1

Hello @IP,

Thank you for connecting with me offline over the Teams call.

As we discussed, you're unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records. This is because the domain you're trying to verify has already been verified in another Entra ID directory. As mentioned in the following documentation:

Common verification issues User's image

If a domain has already been verified in one Entra ID tenant, it cannot be verified in another directory.

Since you do not have ownership of the directory where your domain is currently verified, the only option is to contact the Data Protection team via a support ticket and request that the domain be removed from the existing Entra ID tenant. Once the domain is removed, you should be able to verify it in your own tenant without any issues.

To move forward, we have engaged our Data Protection team through a support ticket. Please follow up with our support team through that ticket — they will assist you in resolving the issue.

I hope this information is helpful. Feel free to reach out if you have any further questions.

Share via

Cannot verify domain

0 additional answers

Your answer