Add your custom domain name using the Azure portal

Azure Active Directory (Azure AD) tenants come with an initial domain name, <domainname> You can't change or delete the initial domain name, but you can add your organization's names. Adding custom domain names helps you to create user names that are familiar to your users, such as

Before you begin

Before you can add a custom domain name, create your domain name with a domain registrar. For an accredited domain registrar, see ICANN-Accredited Registrars.

Create your directory in Azure AD

After you get your domain name, you can create your first Azure AD directory. Sign in to the Azure portal for your directory, using an account with the Owner role for the subscription.

Create your new directory by following the steps in Create a new tenant for your organization.


The person who creates the tenant is automatically the Global administrator for that tenant. The Global administrator can add additional administrators to the tenant.

For more information about subscription roles, see Azure roles.


If you plan to federate your on-premises Windows Server AD with Azure AD, then you need to select I plan to configure this domain for single sign-on with my local Active Directory when you run the Azure AD Connect tool to synchronize your directories.

You also need to register the same domain name you select for federating with your on-premises directory in the Azure AD Domain step in the wizard. To see what that setup looks like, see Verify the Azure AD domain selected for federation. If you don't have the Azure AD Connect tool, you can download it here.

Add your custom domain name to Azure AD

After you create your directory, you can add your custom domain name.

  1. Sign in to the Azure portal using a Global administrator account for the directory.

  2. Search for and select Azure Active Directory from any page. Then select Custom domain names > Add custom domain.

    Custom domain names page, with Add custom domain shown

  3. In Custom domain name, enter your organization's new name, in this example, Select Add domain.

    Custom domain names page, with Add custom domain page


    You must include .com, .net, or any other top-level extension for this to work. When adding a custom domain, the Password Policy values will be inherited from the initial domain.

    The unverified domain is added. The page appears showing your DNS information. Save this information. You need it later to create a TXT record to configure DNS.

    Contoso page with DNS entry information

Add your DNS information to the domain registrar

After you add your custom domain name to Azure AD, you must return to your domain registrar and add the Azure AD DNS information from your copied TXT file. Creating this TXT record for your domain verifies ownership of your domain name.

Go back to your domain registrar and create a new TXT record for your domain based on your copied DNS information. Set the time to live (TTL) to 3600 seconds (60 minutes), and then save the record.


You can register as many domain names as you want. However, each domain gets its own TXT record from Azure AD. Be careful when you enter the TXT file information at the domain registrar. If you enter the wrong or duplicate information by mistake, you'll have to wait until the TTL times out (60 minutes) before you can try again.

Verify your custom domain name

After you register your custom domain name, make sure it's valid in Azure AD. The propagation from your domain registrar to Azure AD can be instantaneous or it can take a few days, depending on your domain registrar.

To verify your custom domain name, follow these steps:

  1. Sign in to the Azure portal using a Global administrator account for the directory.

  2. Search for and select Azure Active Directory from any page, then select Custom domain names.

  3. In Custom domain names, select the custom domain name. In this example, select

    Fabrikam - Custom domain names page, with contoso highlighted

  4. On the page, select Verify to make sure your custom domain is properly registered and is valid for Azure AD.

    Contoso page with DNS entry information and the Verify button

After you've verified your custom domain name, you can delete your verification TXT or MX file.

Common verification issues

If Azure AD can't verify a custom domain name, try the following suggestions:

  • Wait at least an hour and try again. DNS records must propagate before Azure AD can verify the domain. This process can take an hour or more.

  • If you are trying to verify a child domain, verify the parent domain first. Make sure the parent domain is created and verified first before you try to verify a child domain.

  • Make sure the DNS record is correct. Go back to the domain name registrar site. Make sure the entry is there, and that it matches the DNS entry information provided by Azure AD.

    If you can't update the record on the registrar site, share the entry with someone who has permissions to add the entry and verify it's correct.

  • Make sure the domain name isn't already in use in another directory. A domain name can only be verified in one directory. If your domain name is currently verified in another directory, it can't also be verified in the new directory. To fix this duplication problem, you must delete the domain name from the old directory. For more information about deleting domain names, see Manage custom domain names.

  • Make sure you don't have any unmanaged Power BI tenants. If your users have activated Power BI through self-service sign-up and created an unmanaged tenant for your organization, you must take over management as an internal or external admin, using PowerShell. For more information, see Take over an unmanaged directory as administrator in Azure Active Directory.

Next steps