I cannot create a private Microsoft ID with my private domain

Torben Kylling Petersen 0 Reputation points
2026-04-24T14:48:54.87+00:00

my custom private domain is locked in an unknown Organisation Entra ID tenant - request domain release

Microsoft Security | Microsoft Entra | Microsoft Entra ID

1 answer

Sort by: Oldest
  1. AI answer

    2026-04-24T14:49:12.9533333+00:00

    A custom domain can only be verified in a single Microsoft Entra ID tenant at a time. If the private domain is already associated with an unknown or unmanaged tenant, it must be released from that tenant before it can be used to create accounts in another tenant.

    Use the following steps:

    1. Confirm the domain is not already verified in the intended tenant
      • Sign in to the Microsoft Entra admin center as a Domain Name Administrator.
      • Go to Entra IDDomain names and check whether the custom domain appears and has status Verified. If it is not listed, it is in another directory.
    2. Check for unmanaged or external tenants using the domain
      • Review domains at the registrar. If the registrar shows the domain is owned but it cannot be verified in the home tenant, it may be associated with an unmanaged directory created via self-service sign-up (for example, Power BI or other Microsoft cloud services).
      • For unmanaged tenants, perform an admin takeover of the directory that currently owns the domain. Follow the guidance in Admin takeover of an unmanaged directory to claim or take over that tenant, then remove or reassign the domain as needed.
    3. Remove the domain from the old tenant
      • After taking over or regaining admin access to the tenant that currently holds the domain, delete the custom domain from that tenant’s Domain names list so it is no longer verified there.
      • A domain name can only be verified in one directory; it must be removed from the old directory before it can be verified in a new one.
    4. Add and verify the domain in the correct tenant
      • In the target tenant, sign in to the Microsoft Entra admin center as at least a Domain Name Administrator.
      • Go to Entra IDDomain namesAdd custom domain.
      • Enter the full domain name (including the top-level extension such as .com or .net) and select Add domain.
      • Follow the DNS instructions shown (TXT or MX record) at the registrar to prove ownership.
      • After DNS propagation (which can take an hour or more), return to the Entra admin center and complete verification.
    5. If the domain is locked in a tenant that cannot be accessed
      • If the domain is in a tenant that is inactive, unmanaged, or otherwise inaccessible, and an admin takeover is not possible, contact Microsoft Support/Data Protection via the global customer service phone numbers. Provide proof of ownership of the domain and request assistance to claim or release the domain from the unknown tenant.

    Once the domain is successfully removed from the unknown tenant and verified in the intended tenant, it can be used for userPrincipalName values and email addresses in that tenant.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.