Share via

Unable to verify custom domain in Entra ID

Bjørn Grønli 0 Reputation points
2026-03-02T12:28:16.6333333+00:00

I try to verify our domain "RemovedPII" as a custom domain in our Azure tennant.

It fails with error:

Unable to verify domain name. Ensure you have added the record above at the registrar for "mipro.no", and try again in a little while.

The relevant record was added Tuesday last week. It can be verified by NSLOOKUP:

;mipro.no. IN TXT

;; ANSWER SECTION:

RemovedPII. xxxIN TXT "MS=msxxxxxxxxx"

RemovedPII. 3600 IN TXT "v=spf1 include:xxxxxxx.one.com include:spf.xxxxxxxxx.outlook.com include:sendgrid.net ~all"

;; Query time: 18 msec

;; SERVER: xxxxxxxxxxxx#53(xxxxxxxxxx)

;; WHEN: Wed Feb 25 xxxxx:xxx:54 xxxxxxxxxx

;; MSG SIZE  rcvd: xxxx

xxxxx@xxxxx-Mac ~ % nslookup -type=ns mipro.no

Server: xxxxxxxxxxxxxx

Address: xxxxxxxxxxxx

Please advice :-)

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. kagiyama yutaka 1,165 Reputation points
    2026-03-02T21:26:34.4966667+00:00

    I think that ur domain’s still kinda snagged on an old tenant… just force a login with ur domain to see which tenant id pops up, n if it isn’t urs ask ms to drop that stale bind n it’ll go thru.

    0 comments No comments

  2. Raja Pothuraju 45,870 Reputation points Microsoft External Staff Moderator
    2026-03-02T12:40:32.58+00:00

    Hello @Bjørn Grønli,

    Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records in DNS.

    This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

    Common verification issues

    User's image

    First, let's check if your custom domain has already been verified in another Entra directory. You can do this by entering your domain name in the following URL to retrieve the tenant ID where it is verified:

    https://www.whatismytenantid.com/

    Once you have the tenant ID, verify whether it belongs to your tenant. If the tenant ID is different and you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

    To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

    • Custom domain Name:
    • Your tenant ID:
    • Contact Email address:
    • Contact Phone Number:
    • Country
    • TimeZone

    Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.