Additional Microsoft Entra services and features related to identity, access, and network security
For a single domain such as @libero.it not receiving Azure AD B2C verification emails while others work, the behavior matches a delivery or filtering issue on the recipient side rather than a general B2C problem.
Key checks and actions:
- Ask the affected user to check Junk/Spam
- Verification codes are sent from an address like
@accountprotection.microsoft.comor@microsoftonline.com. - The user should check Junk/Spam and any quarantine folders and mark the sender as a trusted/safe sender so future codes arrive in the inbox.
- This is the same pattern as when SharePoint secure-link verification codes do not appear and must be located in Junk/Spam first.
- Verification codes are sent from an address like
- Confirm the email address is correct in the account
- Ensure the user’s email in the B2C account is exactly correct (no typos, no wrong domain variant).
- In Microsoft account scenarios, only the primary alias or configured verification email receives codes; the same principle applies conceptually in B2C—codes go only to the configured address.
- Check for domain-level blocking or filtering
- Since other domains work,
libero.itmay be:- Rejecting or silently dropping messages from
@microsoftonline.com/@accountprotection.microsoft.com, or - Aggressively filtering them to spam.
- Rejecting or silently dropping messages from
- The recipient’s mail provider or admin must review their spam/quarantine settings and allow the sender domain.
- Since other domains work,
- Rate limiting / unusual activity
- Excessive or repetitive requests for verification codes can cause Microsoft to temporarily stop sending codes to protect against abuse. Waiting and reducing repeated attempts can help if this is the case.
- Logs and delivery tracing
- For Microsoft consumer accounts and B2C verification messages, there is no customer-accessible, detailed delivery log for these system-generated verification emails similar to Exchange Online message trace.
- The only practical checks are:
- Confirming the address is correct and configured.
- Having the recipient check their mailbox (including Junk/Spam) and any local rules.
- If the domain is managed by an admin, they can check their own mail system’s logs for inbound messages from Microsoft and adjust filtering.
If the user still cannot receive codes, the only supported options are to use an alternate verification method (different email or phone) if configured, or to follow the account recovery/alternate sign-in flows provided by the application.
References: