Custom Domain

Info Qwork 0 Reputation points
2026-08-05T11:20:40.89+00:00

Hi,

I am unable to get my custom domain verified. I tried to removing readding and also in my DNS registrar but it keeps saying failed not sure why needed help.

Thanks

Azure DNS
Azure DNS

An Azure service that enables hosting Domain Name System (DNS) domains in Azure.


1 answer

Sort by: Most helpful
  1. AI answer

    2026-08-05T11:20:58.69+00:00

    For custom domain verification failures, check these items in order:

    1. Wait and retry. DNS propagation can take at least an hour, and in some cases longer depending on the registrar.
    2. Verify the DNS record exactly matches what Azure provided. Add the TXT or MX record shown for the domain, and set TTL to 3600 seconds (60 minutes). If the record was entered incorrectly or duplicated, wait for the TTL to expire before retrying.
    3. Confirm the record is publicly visible. From Windows Command Prompt, query the TXT record:
         nslookup -q=TXT yourdomain.com
      
      If the expected TXT value does not appear, Azure cannot verify the domain.
    4. Verify the domain in the correct portal location. In the Microsoft Entra admin center, go to Entra ID > Domain names, select the custom domain, and choose Verify.
    5. Check whether the domain is already verified in another directory or tenant. A custom domain can only be verified in one directory at a time. If it is still attached to an old directory, it must be removed there before it can be verified again.
    6. Check for an unmanaged Power BI tenant. If users previously signed up through self-service Power BI, an unmanaged tenant might be holding the domain. That tenant must be taken over before the domain can be reused.
    7. If this is for Azure App Service, validate the domain again after DNS is correct. In Azure portal > App Service > Custom domains, select Add custom domain, enter the hostname, and select Validate. If the portal reports the domain is already in use or linked to another app, remove it from the other resource first. If access to that old resource is no longer available, a support ticket is required to release the domain.
    8. If repeated validation still fails in App Service, use diagnostics. Go to App Service > Diagnose and Solve Problems > SSL and Domains > Run All Certificates & Domains Checks.

    If the domain was previously used in another tenant and that tenant or resource was deleted without removing the domain first, the old association can block reuse until it is removed or released.


    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.