Overview
clientconfig.microsoftonline-p.net is a CNAME (Canonical Name) DNS record used by Microsoft Online Services for authentication and identity verification in Microsoft 365 (formerly Office 365) and Azure Active Directory (Azure AD).
Purpose of clientconfig.microsoftonline-p.net
- Verifies domain ownership for Microsoft services.
- Enables Single Sign-On (SSO) for Microsoft 365 apps (Outlook, Teams, SharePoint, OneDrive).
- Helps with seamless authentication in Azure AD and federated domains.
- Ensures that login requests route correctly through Microsoft’s authentication infrastructure.
If your domain is registered to use Microsoft 365 or Azure AD, Microsoft requires a CNAME record pointing to clientconfig.microsoftonline-p.net.
How to Set Up clientconfig.microsoftonline-p.net (MSOID CNAME Record)
If you're setting up Microsoft 365 or Azure AD, you need to add the MSOID CNAME record to your domain's DNS settings.
Required DNS Record Format
| Record Type | Host (Name) | Value (Target) | TTL |
|---|---|---|---|
| CNAME | msoid.yourdomain.com | clientconfig.microsoftonline-p.net | 3600 |
Replace yourdomain.com with your actual domain name.
Add the MSOID Record in Your DNS Settings
For cPanel Users
- Log in to cPanel.
- Navigate to Zone Editor > Click Manage.
- Click "Add Record" > Select CNAME.
- Enter:
- Name:
msoid.yourdomain.com - Target:
clientconfig.microsoftonline-p.net - TTL:
3600
- Name:
- Click Save.
For Cloudflare Users
- Log in to Cloudflare > Go to DNS Management.
- Click "Add Record" > Select CNAME.
- Enter:
- Name:
msoid - Target:
clientconfig.microsoftonline-p.net - TTL: Auto
- Name:
- Ensure Proxy Status is set to "DNS Only" (?? Gray Cloud, NOT ?? Orange).
- Click Save.
For Other Registrars (GoDaddy, Namecheap, etc.)
- Go to DNS Management.
- Add a new CNAME Record:
- Host:
msoid - Type: CNAME
- Value:
clientconfig.microsoftonline-p.net - TTL:
3600
- Host:
- Click Save.
Now, Microsoft can verify your domain for authentication services.
How to Verify That the clientconfig.microsoftonline-p.net Record Works
Check MSOID Record via Command Line
Linux/macOS
dig CNAME msoid.yourdomain.com +short
Expected Output (Correct Setup):
clientconfig.microsoftonline-p.net.
Windows (Command Prompt)
nslookup -type=CNAME msoid.yourdomain.com
Expected Output:
msoid.yourdomain.com canonical name = clientconfig.microsoftonline-p.net.
Use Online DNS Checkers
If the correct CNAME appears, the record is resolving properly.
Troubleshooting clientconfig.microsoftonline-p.net Issues
| Issue | Possible Cause | Fix |
|---|---|---|
| MSOID record not found | CNAME record missing | Add msoid.yourdomain.com > clientconfig.microsoftonline-p.net |
| DNS changes not detected | Takes time to propagate | Wait 24-48 hours |
| Cloudflare blocking lookup | Cloudflare proxy enabled | Set Proxy to "DNS Only" (Gray Cloud ??) |
| Conflicting CNAME records | Duplicate records in DNS | Remove incorrect CNAMEs |
| Microsoft 365 still not verifying | DNS propagation delay | Wait, then re-check in Admin Center |
Final Verification in Microsoft 365
- Log in to Microsoft 365 Admin Center > admin.microsoft.com.
- Navigate to Settings > Domains.
- Select your domain.
- Click "Verify DNS Settings".
- Microsoft will check the MSOID record.
Once Microsoft detects it, authentication will work properly.
Summary Table
| Task | Steps |
|---|---|
| Check What clientconfig.microsoftonline-p.net Is | It's a Microsoft authentication CNAME record |
| Set Up MSOID Record | Add CNAME: msoid.yourdomain.com > clientconfig.microsoftonline-p.net |
| Verify DNS Record | Use dig, nslookup, or MXToolbox |
| Fix MSOID Issues | Ensure correct CNAME, wait for propagation, disable Cloudflare proxy |
| Confirm in Microsoft 365 | Go to Admin Center > Domains > Verify |
Now your Microsoft authentication (clientconfig.microsoftonline-p.net) should be working properly!



