Fix: "The Record We Detected Doesn't Match All the Expected Values" (MSOID CNAME Issue)

Understanding the Error

When setting up Microsoft 365 or Azure AD, you may encounter the error:

"The record we detected doesn't match all the expected values."

This means that the CNAME, MX, TXT, or SRV record required for Microsoft authentication is either misconfigured, missing, or not yet propagated.

Check the Required MSOID CNAME Record

Verify that your MSOID record is correctly set in your DNS settings.

Correct MSOID CNAME Format:

Ensure:

• msoid.yourdomain.com exists.
• It points to clientconfig.microsoftonline-p.net exactly as shown.
• The TTL (Time to Live) is 3600 seconds (1 hour).

How to Check Your DNS Records: Run:

dig CNAME msoid.yourdomain.com +short

Expected output:

clientconfig.microsoftonline-p.net.

If incorrect or missing, fix the DNS record.

Correct the DNS Record in Your Hosting Provider

If the record is incorrect, update it.

For cPanel Users

1. Log in to cPanel.
2. Go to Zone Editor > Click Manage.
3. Find CNAME Record for msoid.yourdomain.com.
4. If incorrect, click Edit:
   • Name: msoid.yourdomain.com
   • Target: clientconfig.microsoftonline-p.net
   • TTL: 3600
5. Click Save.

For Cloudflare Users

1. Log in to Cloudflare > Go to DNS Management.
2. Click "Add Record" (if missing) or edit existing CNAME.
3. Enter:
   • Name: msoid
   • Target: clientconfig.microsoftonline-p.net
   • TTL: Auto
4. Ensure the "Proxy Status" is set to "DNS only" (?? Gray Cloud, not Orange ??).
5. Click Save.

For Other Registrars (GoDaddy, Namecheap, etc.)

• Navigate to DNS Management.
• Locate or add a new CNAME record.
• Enter:
  • Host: msoid
  • Type: CNAME
  • Value: clientconfig.microsoftonline-p.net
  • TTL: 3600
• Click Save.

Now, the correct MSOID record should be set.

Check for DNS Propagation

DNS changes can take up to 24-48 hours to propagate.

Verify if the update is live:

• Run this in the terminal:

  nslookup -type=CNAME msoid.yourdomain.com

• Use an online tool like:
  • MXToolbox
  • WhatsMyDNS

If the new record appears, Microsoft should now detect it correctly.

Re-Verify in Microsoft 365 Admin

1. Go to Microsoft 365 Admin Center.
2. Navigate to Settings > Domains.
3. Select your domain.
4. Click "Verify DNS Settings".
5. Wait for Microsoft to check the DNS records.

If everything is correct, the error should be resolved.

Troubleshooting If the Error Persists

Summary

Now your MSOID record should be correctly configured!