If your MSOID CNAME record is not resolving, it means Microsoft cannot verify your domain for authentication, which may cause issues with Microsoft 365, Azure AD, and Single Sign-On (SSO). This problem often leads to user login errors, client application configuration issues, and problems using Microsoft cloud services.
Check if your MSOID CNAME record is properly configured in DNS.
Run the command:
Expected Output:
Run the command:
Expected Output:
Check propagation on these sites:
Required MSOID CNAME Record
| Record Type | Host (Name) | Value (Target) | TTL |
|---|---|---|---|
| CNAME | msoid.yourdomain.com | clientconfig.microsoftonline-p.net | 3600 |
Now the MSOID record should be properly configured.
If the MSOID record was recently changed, flush the DNS cache.
Windows
Linux/macOS (systemd)
macOS (alternative)
This clears old DNS entries and forces your computer to check for updated records.
DNS updates can take up to 48 hours. Use WhatsMyDNS to check if the CNAME record has propagated worldwide.
After properly configuring the record, force Microsoft to verify your DNS settings.
Microsoft will now verify the MSOID record and other required records.
| Problem | Solution |
|---|---|
| MSOID record missing | Add the correct CNAME record to DNS |
| DNS changes not detected | Wait 24-48 hours for propagation |
| Cloudflare DNS issues | Set proxy to "DNS Only" (Grey cloud ??) |
| Conflicting CNAME records | Remove duplicate or incorrect CNAME records |
| Incorrect MSOID CNAME value | Ensure target is clientconfig.microsoftonline-p.net (no prefix or suffix) |
| Record blocked by firewall | Check firewall settings and network rules |
| DNS server cache issues | Clear DNS cache on local router or ISP |
| Task | Steps |
|---|---|
| Check if MSOID resolves | Use dig CNAME msoid.yourdomain.com +short |
| Fix MSOID record | Set CNAME to clientconfig.microsoftonline-p.net |
| Flush DNS and check propagation | Use ipconfig /flushdns and WhatsMyDNS |
| Check in Microsoft 365 | Go to Admin Center > Domains > Verify |
| Troubleshoot | Check conflicting records, proxy settings, propagation delays |
Your MSOID record should now resolve correctly!