Custom Domain verification for Entra ID not working

Question

Custom Domain verification for Entra ID not working

NQaiser 0

Hi Everyone,

I created an azure account using my gmail.com address, and once created, I wanted to add a custom domain into my account (seemi.net ), I have tried to add the custom domain, and populated the relevant TXT record aswell as the MX record with my domain registrar(cloudflare). Despite doing everything, the verification does not go through. I have verified using nslookup that the txt records are indeed there, and waited long enough. in all cases I just get the the following error:

Unable to verify domain name. Ensure you have added the record above at the registrar for 'seemi.net', and try again in a little while. Click here for more information.

Now, some people have mentioned in other cases that this can happen if the domain has already been registered in a different tenant. in my case when i hit the following URL:

https://login.microsoftonline.com/seemi.net/v2.0/.well-known/openid-configuration

It shows the following tenant ID, which is unknown and I have no idea how someone could affiliate my domain with their tenant ID, without completing the TXT DNS verification.

Now here is the deal:

Invalid Tenant ID : a46186b4-d5fd-489d-9805-e2fe01dfb638

Correct Tenant ID: 4489adb0-c4ac-4e5c-a925-1b095bfff1b8

It is possible that this is altogether a different bug and not linked to Domain belonging in different tenants.

Microsoft sales team and the Support Ticket teams are unable to help due to a missing paid support plan.

Given this situation, I am locked out of using my domain in my tenant, I have following questions:

How exactly do i reachout to the data protection team and ask them to remove the domain from earlier tenant?
Could there be something else that could be done here?

Regards,

N. Qaiser

Oshione Esiemokhai Gabriel 5 Reputation points

2025-08-10T00:32:56.7466667+00:00

So from my understanding you can confirm that you have registered the third party domain name in another tenant in the subscription or no ? I believe that in azure domain names you register are globally unique.
NQaiser 0 Reputation points

2025-08-10T05:26:48.11+00:00

So my domain name was purchased from Cloudflare. I have not added this domain to any other tenant, so the tenant ID a46186b4-d5fd-489d-9805-e2fe01dfb638 is unknown and I am not sure how my domain was added there without DNS verification/my consent. My correct tenant ID is d7dab130-783f-420d-b7a3-01451a97244d and this is where I intend to add/verify the domain seemi.net.
Oshione Esiemokhai Gabriel 5 Reputation points

2025-08-10T16:45:06.6433333+00:00

So what you are saying is that you did not register the domain name and somehow it has already been registered in another tenant with the txt and ms records yes or no ?
NQaiser 0 Reputation points

2025-08-11T09:48:24.5233333+00:00

From the look of it, yes it seems the domain is regierested in another tenant. Since I manage the DNS records for this domain, I am quite certain no-one can add txt records into the DNS. It is possible though that someone added this domain to their tenant without completing verification. but given everything I am currently stuck into the unverified state, When I read other forum discussions on it, it seems like something Data protection team could solve, but I am not aware how to contact them and neither does a basic plan allow raising SRs. Is this something the moderators on this forum can help with?
Raja Pothuraju 29,330 Reputation points Microsoft External Staff Moderator

2025-08-11T17:03:54.6833333+00:00
Hello NQaiser,

Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records in Cloudflare.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

Common verification issues

As you confirmed that your domain is already verified in one of the Entra directory that you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Custom domain Name:

Your tenant ID:

Contact Email address:

Contact Phone Number:

Country

TimeZone

Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.
NQaiser 0 Reputation points

2025-08-11T18:37:29.08+00:00

Thanks Raja, I have sent you details by PM

1 answer

Your answer

Oshione Esiemokhai Gabriel 5 Reputation points

2025-08-10T00:32:56.7466667+00:00

So from my understanding you can confirm that you have registered the third party domain name in another tenant in the subscription or no ? I believe that in azure domain names you register are globally unique.
NQaiser 0 Reputation points

2025-08-10T05:26:48.11+00:00

So my domain name was purchased from Cloudflare. I have not added this domain to any other tenant, so the tenant ID a46186b4-d5fd-489d-9805-e2fe01dfb638 is unknown and I am not sure how my domain was added there without DNS verification/my consent. My correct tenant ID is d7dab130-783f-420d-b7a3-01451a97244d and this is where I intend to add/verify the domain seemi.net.
Oshione Esiemokhai Gabriel 5 Reputation points

2025-08-10T16:45:06.6433333+00:00

So what you are saying is that you did not register the domain name and somehow it has already been registered in another tenant with the txt and ms records yes or no ?
NQaiser 0 Reputation points

2025-08-11T09:48:24.5233333+00:00

From the look of it, yes it seems the domain is regierested in another tenant. Since I manage the DNS records for this domain, I am quite certain no-one can add txt records into the DNS. It is possible though that someone added this domain to their tenant without completing verification. but given everything I am currently stuck into the unverified state, When I read other forum discussions on it, it seems like something Data protection team could solve, but I am not aware how to contact them and neither does a basic plan allow raising SRs. Is this something the moderators on this forum can help with?
Raja Pothuraju 29,330 Reputation points Microsoft External Staff Moderator

2025-08-11T17:03:54.6833333+00:00

Hello NQaiser,

Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records in Cloudflare.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

Common verification issues

As you confirmed that your domain is already verified in one of the Entra directory that you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Custom domain Name:

Your tenant ID:

Contact Email address:

Contact Phone Number:

Country

TimeZone

Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.
NQaiser 0 Reputation points

2025-08-11T18:37:29.08+00:00

Thanks Raja, I have sent you details by PM

Answer 1

Hello NQaiser,

Thank you for sharing the details over private message.

The issue relates to an unable to verify custom domain name as it is verified in different directory in Azure.

To resolve this, we have engaged our Data Protection team through a support ticket. They will reach out to you via email or phone to help restore access to the tenant and assist in resolving the issue.

Once the issue has been resolved by our support team, please feel free to revisit and kindly click "Accept Answer," as this will be helpful to other community members facing similar issues.

Share via

Custom Domain verification for Entra ID not working

1 answer

Your answer