Question

Your company owns the public DNS domain contoso.com and wants users in Microsoft Entra ID to sign in with user principal names such as user@contoso.com instead of the default onmicrosoft.com domain. You add contoso.com as a custom domain name in the Microsoft Entra admin center, but it shows a status of Unverified. What must you do to complete verification?

Accepted Answer

Create the TXT (or MX) record provided by Microsoft Entra ID in the contoso.com public DNS zone, then select Verify in the Entra admin center.

Answer

Assign each affected user a Microsoft Entra ID P2 license before the domain can be verified.

Answer

Configure password hash synchronization with Microsoft Entra Connect and wait for the next sync cycle.

Answer

Create an A record in the contoso.com DNS zone pointing to the Microsoft Entra ID sign-in endpoint IP address.