Unable to verify Custom Domain in Azure Active Directory albeit the TXT is valid.

Question

Unable to verify Custom Domain in Azure Active Directory albeit the TXT is valid.

ohpreis 20

I added a custom domain name to Microsoft Entra Custom Domain Names but it fails to validate albeit the TXT validates using nslookup. See the attached images.

How can I get this resolved.

Screenshot 2025-07-16 at 11.06.03 AM

Screenshot 2025-07-16 at 11.05.31 AM

Raja Pothuraju 47,825 Reputation points Microsoft Employee Moderator

2025-07-16T17:42:15.0333333+00:00
Hello ohpreis,

Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records in DNS records.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

Common verification issues

First, let's check if your custom domain has already been verified in another Entra directory. You can do this by entering your domain name in the following URL to retrieve the tenant ID where it is verified:

https://www.whatismytenantid.com/

Once you have the tenant ID, verify whether it belongs to your tenant. If the tenant ID is different and you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Custom domain Name:

Your tenant ID:

Contact Email address:

Contact Phone Number:

Country

TimeZone

Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.
ohpreis 20 Reputation points

2025-07-16T20:17:57.3166667+00:00

Thank you for your quick response.

It is very likely that this domain name is registered with another Entra directory within our company. Let me investigate, and I will get back with my findings as soon as possible and submit a private message to proceed.

Thanks

Oscar

Answer accepted by question author

0 additional answers

Your answer

Raja Pothuraju 47,825 Reputation points Microsoft Employee Moderator

2025-07-16T17:42:15.0333333+00:00

Hello ohpreis,

Based on your description, it seems that you are unable to verify your custom domain in your Entra ID tenant, even after correctly adding the TXT records in DNS records.

This issue often occurs when the domain has already been verified in another Entra directory, as explained in the following document:

Common verification issues

First, let's check if your custom domain has already been verified in another Entra directory. You can do this by entering your domain name in the following URL to retrieve the tenant ID where it is verified:

https://www.whatismytenantid.com/

Once you have the tenant ID, verify whether it belongs to your tenant. If the tenant ID is different and you do not own that directory, the only option is to contact the Data Protection team via a support ticket to request the removal of the domain verification from the existing Entra ID tenant. After the removal, you should be able to verify the domain in your tenant without any issues.

To involve Data Protection team via a support ticket, I need a few details from you. As this information contains Personally Identifiable Information (PII), please share the following details via private message:

Custom domain Name:

Your tenant ID:

Contact Email address:

Contact Phone Number:

Country

TimeZone

Once you send me these details via private message, we can connect offline to discuss further and assist you in resolving this issue.
ohpreis 20 Reputation points

2025-07-16T20:17:57.3166667+00:00

Thank you for your quick response.

It is very likely that this domain name is registered with another Entra directory within our company. Let me investigate, and I will get back with my findings as soon as possible and submit a private message to proceed.

Thanks

Oscar

Answer 1

Hello ohpreis,

Thank you for your time over the call.

As discussed, the custom domain you're trying to verify is already in use within your main directory. Due to current limitations in Microsoft Entra ID, a custom domain can only be verified in one directory at a time. If you attempt to verify the same domain in another directory, the verification will fail—even if the correct TXT and MX records are configured at the DNS level. You can refer to the documentation below for more details:

Common verification issues

User's image

Regarding the MPN ID verification for your application, it cannot be completed unless the custom domain is verified in the same directory where the application is registered. You have two options:

Verify the custom domain in the current directory where the application is hosted (which would require un-verifying it from the main directory first), or
Add a new custom domain to the current directory and obtain an MPN ID associated with that new domain.

This will allow you to link the MPN ID to your application successfully.