This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(217.60000000000002, 35%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERW%3C/text%3E%3C/svg%3E)
Hello I am migrating from exchange 2013 to Exchange online and want to use Duo for federation with 365. I have a default domain of mydomain.com and i have the onmicrosoft domain. If I select the onmicrosoft domain as default I can then federate the mycompany.com domain but I can't change it back. I was wondering what are the issues if i leave onmicrosoft as the default? Can I just manually change the domain for any new user I create so they get the mycompany.com domain? Is that the ramification I will deal with in the future? Are there any other issues I need to worry about? thanks so much!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 90%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAK%3C/text%3E%3C/svg%3E)
Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.
You cannot federate the *.onmicrosoft.com domain. You will need to federate a custom domain. So first you will need to register the domain in the Azure AD blade: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain
Then you woul need to follow the steps here: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-whatis Have a look and let us know if you have questions.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 52%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EIA%3C/text%3E%3C/svg%3E)
What if I want to convert my custom domain into a federated domain without having Local AD. I want to set Google as my IDP for SSO.