Unable to verify custom domain in Azure

Jalin Johnson 0 Reputation points
2026-03-23T18:13:35.5633333+00:00

I recently purchased a domain and have been trying to verify it in EntraID so I'm able to make it my default domain for accounts. I've created the TXT file in my DNS provider, I've checked with DNS checker sites that the return is the same that Microsoft is providing, but when running a script to confirm that the tenant ID my domain is the one associated with my domain I'm getting a different value that I do not recognize. I would like to request a domain release but it looks like this option is unavailable with my current plan. How else can I get in contact with MS to process a domain release?

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Newest
Most helpful Newest Oldest

  1. AI answer

    2026-03-23T18:13:53.2966667+00:00

    The domain is almost certainly already verified in another Microsoft Entra tenant. A custom domain can only be verified in one tenant at a time, and Microsoft will not allow it to be verified in more than one.

    From the behavior described (TXT record correct, but a different tenant ID showing as the owner), the required action is:

    1. Remove the domain from the existing tenant
      • The domain must be deleted from the tenant where it is currently verified.
      • This can only be done by an admin of that other tenant.
      • After deletion, the domain becomes available to be added and verified in the new tenant.
    2. Add and verify the domain in the correct tenant
      • In the target tenant, go to Entra ID → Domain names → Add custom domain and add the domain.
      • Copy the TXT (or MX) record that Entra provides and ensure it is present at the DNS host with TTL 3600 seconds.
      • After DNS propagation, go back to Entra ID → Domain names, select the domain, and select Verify.
    3. If the domain cannot be removed from the other tenant
      • Microsoft will not allow verification of the same domain in two tenants.
      • If the domain is associated with an unmanaged tenant (for example, created by self-service sign-up such as Power BI), an admin must perform an admin takeover of that unmanaged directory and then delete the domain from it.
    4. Contact options for domain release
      • The documented path for resolving duplication is to delete the domain from the old directory. If that directory is unmanaged (for example, created by self-service sign-up), the supported method is to take over the unmanaged directory using PowerShell and then manage/remove the domain.
      • There is no alternative “domain release” mechanism exposed in the documentation other than removing the domain from the existing tenant and following the takeover process for unmanaged tenants.

    Key checks before retrying verification:

    • Confirm the TXT/MX record exactly matches the value shown in the Microsoft Entra admin center for that tenant.
    • Wait at least an hour for DNS propagation before selecting Verify.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.