Unable to Verify Domain - Multi Domain Challenge

Question

We have Multiple domains as a Group Company. All of them are on separate M365 Tenants, and all the domains are trusted.

We are building applications on Azure and want to authenticate users using Entra ID.

When I try to use CustomDomain to add the group company domain, it doesn't verify.

The DNS has propagated, and it's been more than 72 hours, but the issue persists.

It works for domains where there are no M365 licenses associated, but doesn't work on the ones that are.

Can someone help me with this?

Answer 1

Hello Chetan , Welcome to MS Q&A
To verify a custom domain in Azure Entra ID, follow these steps:

1. Sign in to the Microsoft Entra admin center with at least a Domain Name Administrator role.
2. Navigate to Entra ID > Domain names.
3. In Custom domain names, select the domain you want to verify.
4. On the domain page, select Verify to ensure your custom domain is properly registered and valid.

Common Verification Issues

• Wait at least an hour and try again: DNS records must propagate before verification, which can take some time.
• Ensure the DNS record is correct: Verify the DNS entry at your domain registrar site matches the information provided in the Microsoft Entra admin center.
• Check for domain duplication: A domain can only be verified in one directory. If it's verified elsewhere, it must be removed from the old directory.
• Unmanaged Power BI tenants: If users have created an unmanaged tenant via Power BI self-service sign-up, you must take over management using PowerShell.

For more detailed guidance, you can refer to the official documentation.

Pls check and let us know if any further ques

Thanks
Deepanshu

Answer 2

Hello Chetan Pal,

Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records in domain page.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

Common verification issues

First, let's check if your custom domain has already been verified in another Entra directory. You can do this by entering your domain name in the following URL to retrieve the tenant ID where it is verified:

https://www.whatismytenantid.com/

Once you have the tenant ID, verify whether it belongs to your tenant. If the tenant ID is different and you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

• Custom domain Name:
• Your tenant ID:
• Contact Email address:
• Contact Phone Number:
• Country
• TimeZone

Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.