Unable to change domain from federated to managed

Neeraj Kumawat 0 Reputation points
2025-06-20T10:39:27.0333333+00:00

Hi Community,

Good day!

We are unable to change the status of domain from federated to managed, even though tried with all super admin account but it won't to allow to connect-msolservice as well in the powershell.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
971 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Abiola Akinbade 29,405 Reputation points Volunteer Moderator
    2025-06-20T10:44:23.95+00:00
    0 comments No comments

  2. Venkata Jagadeep 1,400 Reputation points Microsoft External Staff Moderator
    2025-06-23T17:05:13+00:00

    Hello Neeraj Kumawat,

    As suggested by Abiola Akinbade that MS-Online is deprecated, I suggest you to install Microsoft Graph Powershell to execute the command to convert your federated domain to managed.

    To perform this all you need is access to federation server and global admin account which has ".onmicrosoft.com" suffix.

    Please refer the below document to install Microsoft Graph Powershell.

    Install-Module Microsoft.Graph -Force

    Reference :

    https://learn.microsoft.com/en-us/powershell/microsoftgraph/installation?view=graph-powershell-1.0

    Please run the below command to connect to your Entra-ID tenant.

    Connect-MgGraph

    Please login with Global Admin user account which has ".onmicrosoft.com" suffix.

    Ref:

    https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.authentication/connect-mggraph?view=graph-powershell-1.0

    You can run below commands in Graph PowerShell from the device which is a federation server.

    Convert-MsolDomainToStandard -DomainName <DomainName> (You will have to run this command if you are using ADFS for federation)

    If you are using any other identity provider for federation then you can replace above last command with below command.

    Set-MsolDomainAuthentication -DomainName <DomainName> -Authentication Managed

    Let me know if you have any further questions.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.