Static Web App custom domain validation intermittingly looping / failing on initial provisioning before auto-resolving

Vishesh Kapoor 0 Reputation points
2026-07-08T08:14:37.0466667+00:00

We are experiencing an issue where adding custom subdomains to Azure Static Web Apps consistently transitions into a "Validation failed" or an unrecoverable "Unknown error" loop during the initial verification / certificate provisioning stage, even when valid CNAME records are present in Azure DNS. Intriguingly, if left completely untouched for a period of time, the platform's background control plane eventually hooks up, completes the handshake, and transitions the state to "Validated" automatically after approximately 5 to 10 background retry attempts without any administrative interference on our end. Steps to Reproduce / Observed Behavior:

  1. An explicit CNAME record for a subdomain (e.g., platform or learner-app) is mapped in our Azure DNS Zone pointing directly to the standard .`azurestaticapps.net` deployment hostname.
  2. The domain is attached to the corresponding Static Web App via the portal/CLI.
  3. Instead of parsing the CNAME immediately, the custom domain blade freezes at the "Retrieving validation token" or throws a generic red "Unknown error" UI banner.
  4. If we trigger a deletion via the Azure CLI (az staticwebapp hostname delete), the hostname frequently hangs indefinitely in a "Deleting" loop, implying a control-plane deadlock.
  5. If the resource is left alone in its failed/stuck state, the system suddenly succeeds on its own later, generating the managed certificate after multiple internal timeout intervals.

Requested Action: Please review the internal asynchronous control plane logs for our Static Web Apps subscription during custom domain provisioning. It appears that the edge certificate generation validation pipeline is encountering caching or timing race conditions with internal Azure DNS routing resolution before successfully assigning the free managed SSL certificate.We are experiencing an issue where adding custom subdomains to Azure Static Web Apps consistently transitions into a "Validation failed" or an unrecoverable "Unknown error" loop during the initial verification / certificate provisioning stage, even when valid CNAME records are present in Azure DNS.

Intriguingly, if left completely untouched for a period of time, the platform's background control plane eventually hooks up, completes the handshake, and transitions the state to "Validated" automatically after approximately 5 to 10 background retry attempts without any administrative interference on our end.
Steps to Reproduce / Observed Behavior:

  1. An explicit CNAME record for a subdomain (e.g., platform or learner-app) is mapped in our Azure DNS Zone pointing directly to the standard .`azurestaticapps.net` deployment hostname.
  2. The domain is attached to the corresponding Static Web App via the portal/CLI.
  3. Instead of parsing the CNAME immediately, the custom domain blade freezes at the "Retrieving validation token" or throws a generic red "Unknown error" UI banner.
  4. If we trigger a deletion via the Azure CLI (az staticwebapp hostname delete), the hostname frequently hangs indefinitely in a "Deleting" loop, implying a control-plane deadlock.
  5. If the resource is left alone in its failed/stuck state, the system suddenly succeeds on its own later, generating the managed certificate after multiple internal timeout intervals.

Impacted Resources Examples:

Requested Action:
Please review the internal asynchronous control plane logs for our Static Web Apps subscription during custom domain provisioning. It appears that the edge certificate generation validation pipeline is encountering caching or timing race conditions with internal Azure DNS routing resolution before successfully assigning the free managed SSL certificate.

Azure Static Web Apps
Azure Static Web Apps

An Azure service that provides streamlined full-stack web app development.


1 answer

Sort by: Most helpful
  1. Senthil kumar 1,465 Reputation points
    2026-07-08T08:26:47.63+00:00

    Hi @Vishesh Kapoor

    open azure powershell. then type below commands.

    First command return app name and resourcegroup name.

    az staticwebapp list --query "[].{name:name, group:resourceGroup}" -o table  
    replace your app name, resource name, website name. 
    az staticwebapp hostname delete --name YOUR-APP-NAME --resource-group YOUR-RESOURCE-GROUP --hostname yourwebsite.com
    

    suppose take time terminate the command and try again it will work.

    Thanks.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.