Cannot verify custom domain in azure

Question

Cannot verify custom domain in azure

Shady Dorgham 0

Not able to verify ********.net as a custom domain in ms entra .

Shady Dorgham 0 Reputation points

2025-03-05T13:20:19.9933333+00:00

@Sakshi Devkante , I have tried all these solutions for more than a month , however this record is globally available but I cannot verify on azure https://www.whatsmydns.net/#TXT/corgate.net
Shady Dorgham 0 Reputation points

2025-03-06T06:36:11.4733333+00:00
Shady Dorgham 0 Reputation points

2025-03-06T06:37:12.76+00:00

deleted.
Shady Dorgham 0 Reputation points

2025-03-06T06:37:36.4433333+00:00

deleted
Sakshi Devkante 1,335 Reputation points Microsoft External Staff

2025-03-06T09:55:15.4433333+00:00
Hello Shady,

This issue is happening because you are trying to add and verify a domain ".......net" in one of the tenants. Whereas this domain is already verified in another tenant.

You can check in below URL to confirm which tenant is your domain verified in,

https://gettenantpartitionweb.azurewebsites.net/

As per this output domain ".......net" is already registered in tenant with tenant ID: (To view tenant id, please look into Private Message).

As per Microsoft one domain name can only be verified in one directory.

To fix this you will have to contact anyone from tenant and get the domain "......net" removed from the tenant. Post that you will be able to verify the domain in any other tenants.

If you are the administrator for tenant then you can log in to the tenant delete the domain.

To delete a custom domain name, you must first ensure that no resources in your organization rely on the domain name. You can't delete a domain name from your organization if:

Any user has a username, email address, or proxy address that includes the domain name.

Any group has an email address or proxy address that includes the domain name.

Any application in your Azure AD has an app ID URI that includes the domain name.

You can also refer article https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/domains-manage#delete-a-custom-domain-name

If the issue still persists, then please go through this Q&A article where the same issue is being discussed https://learn.microsoft.com/en-us/answers/questions/2201508/verify-domain-name-for-tenant-directory
Sakshi Devkante 1,335 Reputation points Microsoft External Staff

2025-03-07T15:16:36.1266667+00:00

Hello Shady,

I hope you're doing well. I just wanted to follow up and see if you had any updates regarding the thread. I haven’t heard back from you and wanted to make sure everything is going smoothly.
Shady Dorgham 0 Reputation points

2025-03-07T22:04:28.0266667+00:00

@Sakshi Devkante Thanks for you deep investigation , that explains the problem correctly , But I have no idea how to reach out the owner of this tenant or who did so , We are the owner of this domain on godaddy , I am out of ideas here , Anyway to reachout to the owner of this tenant ?
Raja Pothuraju 16,040 Reputation points Microsoft External Staff

2025-03-11T23:29:11.25+00:00
Hello @Shady Dorgham,

Thank you for your response.

As Sakshi mentioned, we need to remove the domain from the other directory where it was previously verified. Only after it has been removed from that directory, we can proceed with verifying it in your directory.

Since the other directory is not managed by you, you won’t be able to remove the domain yourself. To resolve this, we will need to involve our Data Protection team. A Data Protection engineer will verify your ownership of the domain (purchased from GoDaddy) and, if you meet all the necessary requirements, they will proceed with removing the domain from the other directory.

Once this is completed, you will be able to verify the domain in your own directory.

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Contact phone number (add +Country code)

Contact email address

Global admin email address

Your Tenant ID

Country

TimeZone

Custom Domain Name

Please send these details via private message, and we can then connect offline to discuss further and assist you in resolving this issue.

1 answer

Your answer

Shady Dorgham 0 Reputation points

2025-03-05T13:20:19.9933333+00:00

@Sakshi Devkante , I have tried all these solutions for more than a month , however this record is globally available but I cannot verify on azure https://www.whatsmydns.net/#TXT/corgate.net
Shady Dorgham 0 Reputation points

2025-03-06T06:36:11.4733333+00:00
Shady Dorgham 0 Reputation points

2025-03-06T06:37:12.76+00:00

deleted.
Shady Dorgham 0 Reputation points

2025-03-06T06:37:36.4433333+00:00

deleted
Sakshi Devkante 1,335 Reputation points Microsoft External Staff

2025-03-06T09:55:15.4433333+00:00

Hello Shady,

This issue is happening because you are trying to add and verify a domain ".......net" in one of the tenants. Whereas this domain is already verified in another tenant.

You can check in below URL to confirm which tenant is your domain verified in,

https://gettenantpartitionweb.azurewebsites.net/

As per this output domain ".......net" is already registered in tenant with tenant ID: (To view tenant id, please look into Private Message).

As per Microsoft one domain name can only be verified in one directory.

To fix this you will have to contact anyone from tenant and get the domain "......net" removed from the tenant. Post that you will be able to verify the domain in any other tenants.

If you are the administrator for tenant then you can log in to the tenant delete the domain.

To delete a custom domain name, you must first ensure that no resources in your organization rely on the domain name. You can't delete a domain name from your organization if:

Any user has a username, email address, or proxy address that includes the domain name.

Any group has an email address or proxy address that includes the domain name.

Any application in your Azure AD has an app ID URI that includes the domain name.

You can also refer article https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/domains-manage#delete-a-custom-domain-name

If the issue still persists, then please go through this Q&A article where the same issue is being discussed https://learn.microsoft.com/en-us/answers/questions/2201508/verify-domain-name-for-tenant-directory
Sakshi Devkante 1,335 Reputation points Microsoft External Staff

2025-03-07T15:16:36.1266667+00:00

Hello Shady,

I hope you're doing well. I just wanted to follow up and see if you had any updates regarding the thread. I haven’t heard back from you and wanted to make sure everything is going smoothly.
Shady Dorgham 0 Reputation points

2025-03-07T22:04:28.0266667+00:00

@Sakshi Devkante Thanks for you deep investigation , that explains the problem correctly , But I have no idea how to reach out the owner of this tenant or who did so , We are the owner of this domain on godaddy , I am out of ideas here , Anyway to reachout to the owner of this tenant ?
Raja Pothuraju 16,040 Reputation points Microsoft External Staff

2025-03-11T23:29:11.25+00:00

Hello @Shady Dorgham,

Thank you for your response.

As Sakshi mentioned, we need to remove the domain from the other directory where it was previously verified. Only after it has been removed from that directory, we can proceed with verifying it in your directory.

Since the other directory is not managed by you, you won’t be able to remove the domain yourself. To resolve this, we will need to involve our Data Protection team. A Data Protection engineer will verify your ownership of the domain (purchased from GoDaddy) and, if you meet all the necessary requirements, they will proceed with removing the domain from the other directory.

Once this is completed, you will be able to verify the domain in your own directory.

To proceed, I will need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Contact phone number (add +Country code)

Contact email address

Global admin email address

Your Tenant ID

Country

TimeZone

Custom Domain Name

Please send these details via private message, and we can then connect offline to discuss further and assist you in resolving this issue.

Answer 1

Hello Shady,

Thank you for posting your query on Microsoft Q&A.

From your issue, I understand that you're trying to verify your domain within Ms Entra. have you tried to added your custom domain and a new TXT record based on your copied DNS information from Azure AD to your domain registrar and waited longer than the 72 hours.

There may be another possibility that this domain is already verified in some other tenant in this case You will have to first remove the domain from old tenant and only then you will be able to add and verify the domain in new tenant.

As per Microsoft one domain name can only be verified in one directory. You can also refer article https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/domains-manage#delete-a-custom-domain-name

Also, have you looked into some of the common verification issues to see if any of the suggestions help point you in the right direction?

Common verification issues:

Wait at least an hour and try again. DNS records must propagate before Azure AD can verify the domain. This process can take an hour or more.
If you are trying to verify a child domain, verify the parent domain first. Make sure the parent domain is created and verified first before you try to verify a child domain.
Make sure the DNS record is correct. Go back to the domain name registrar site. Make sure the entry is there, and that it matches the DNS entry information provided by Entra ID. If you can't update the record on the registrar site, share the entry with someone who has permissions to add the entry and verify it's correct.
Make sure the domain name isn't already in use in another directory. A domain name can only be verified in one directory. If your domain name is currently verified in another directory, it can't also be verified in the new directory. To fix this duplication problem, you must delete the domain name from the old directory. For more information about deleting domain names, see Manage custom domain names.
Make sure you don't have any unmanaged Power BI tenants. If your users have activated Power BI through self-service sign-up and created an unmanaged tenant for your organization, you must take over management as an internal or external admin, using PowerShell. For more information, see Take over an unmanaged directory as administrator in Azure Active Directory.

Similar Q&A Threads: https://learn.microsoft.com/en-us/answers/questions/1054065/aad-custom-domains

https://learn.microsoft.com/en-us/answers/questions/1358481/not-able-to-verify-custom-domain

https://learn.microsoft.com/en-us/answers/questions/810312/unable-to-verify-custom-domain-in-azure-txt-record

I hope this clarifies things.

Share via

Cannot verify custom domain in azure

1 answer

Your answer