--- title: "Fixing custom domain configuration problems for Azure Email Communication Services | DuoCircle" description: "Fixing custom domain configuration problems for Azure Email Communication Services." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/email-hosting/fixing-custom-domain-configuration-problems-for-azure-email-communication-services/" --- Quick Answer Three common failure modes when configuring a custom domain in Azure Email Communication Service. Custom domain verification fails when the ms-domain-verification TXT record is missing or has a typo: copy the value from the Azure portal, publish it at your DNS provider, and verify with \`nslookup -q=TXT yourdomain.com\` or MxToolBox. SPF fails when the record is missing or ends with \~all instead of -all, or when the SPF 10-lookup limit is exceeded by stacking multiple providers: publish the Azure-provided record with -all and flatten where needed. DKIM fails when the CNAME records for the Azure selectors are not published: add them and confirm with nslookup. DNS TTL settings can delay propagation, so allow time before retrying. Fixing custom domain configuration problems for Azure Email Communication Services Your browser does not support the audio element. [ Download episode](https://media.mailhop.org/duocircle/images/2024/11/Fixing-custom-domain-configuration-problems-for-Azure-Email-Communication-Services.mp3) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Femail-hosting%2Ffixing-custom-domain-configuration-problems-for-azure-email-communication-services%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Fixing%20custom%20domain%20configuration%20problems%20for%20Azure%20Email%20Communication%20Services&url=undefined%2Fblog%2Femail-hosting%2Ffixing-custom-domain-configuration-problems-for-azure-email-communication-services%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Femail-hosting%2Ffixing-custom-domain-configuration-problems-for-azure-email-communication-services%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Femail-hosting%2Ffixing-custom-domain-configuration-problems-for-azure-email-communication-services%2F&title=Fixing%20custom%20domain%20configuration%20problems%20for%20Azure%20Email%20Communication%20Services "Share on Reddit") [ ](mailto:?subject=Fixing%20custom%20domain%20configuration%20problems%20for%20Azure%20Email%20Communication%20Services&body=Check out this article: undefined%2Fblog%2Femail-hosting%2Ffixing-custom-domain-configuration-problems-for-azure-email-communication-services%2F "Share via Email") ![domain configuration](https://media.mailhop.org/duocircle/images/2024/11/spf-record-2941.jpg) If safe [email communication](https://www.tidio.com/blog/email-communication/) is one of your priorities, you have to ensure consistent and reliable paths for messages to travel on. With increased instances of sophisticated cybercrimes, [email service providers](https://www.activecampaign.com/glossary/email-service-provider) are also using strict filters. So, if you are not taking care of **proper configurations** of [email security](/) protocols and software, your messages are highly prone to getting [marked as spam](https://www.bleepingcomputer.com/news/microsoft/microsoft-warns-gmail-blocks-some-outlook-email-as-spam-shares-fix/) or bouncing back. Azure requires DNS verification to confirm the domain’s ownership. Verification will fail if the [TXT record](https://www.digicert.com/faq/dns/what-is-a-txt-record) provided by Azure isn’t added correctly or contains a typo. Moreover, some **DNS configurations** may have a TTL setting that delays the DNS updates. SPF, DKIM, and [DMARC](/resources/what-is-dmarc) configurations are essential for **secure email delivery**, but they can be challenging to set up. [SPF records](/resources/spf-records) have a 10-lookup limit, which can easily be exceeded if multiple email providers are used on the same domain, leading to deliverability issues. DKIM must be properly configured with specific keys to avoid messages being flagged as spam. _Additionally, if DMARC settings don’t align with [SPF](/resources/what-is-spf) and DKIM, emails may be marked as spoofed or experience delivery issues_. [![secure email delivery](https://media.mailhop.org/duocircle/images/2024/11/windows-smtp-service.jpg)](https://media.mailhop.org/duocircle/images/2024/11/windows-smtp-service.jpg) This article explains how to fix these issues in **Azure Email Communication**. ## Problem 1: Unable to verify a custom domain Add a TXT record to your **domain’s hosting provider**. This will help you verify the ownership of your custom domain. [Azure Email Communication](https://learn.microsoft.com/en-us/azure/communication-services/concepts/email/email-overview) Service attempts to read the TXT record from your custom domain when the verification process begins. The verification process shows a ‘failed’ result if it can’t read the TXT record. This is how you fix the issue- - Copy the suggested TXT record from the **Azure portal**, which will look like this: \`ms-domain-verification=43d01b7e-996b-4e31-8159-f10119c2087a\`. - _Add this record through your domain registrar or DNS provider_. - To confirm, use the \`nslookup\` tool in Windows CMD with \`nslookup -q=TXT YourCustomDomain.com\`, or a third-party tool like [MxToolBox](https://mxtoolbox.com/dnslookup.aspx?utm%5Fterm=dns%20monitoring&utm%5Fcampaign=Products). - If the TXT record isn’t visible, Azure Email Communication Service won’t **verify your domain**. ## Problem 2: Unable to verify SPF status Once you are done verifying your domain, you need to check your SPF and [DKIM TXT records](https://docs.rackspace.com/docs/create-a-dkim-txt-record). If SPF is failing, follow these steps- - Copy the SPF record from the Azure Portal and add it through your **domain registrar** or [DNS provider](https://auq.io/knowledge-base/what-is-a-dns-provider/). - _Ensure it ends with -all (not \~all) to avoid verification issues_. - To confirm, check your domain’s TXT records with nslookup -q=TXT YourCustomDomain.com in Windows CMD or use a [third-party](https://www.investopedia.com/terms/t/third-party.asp) DNS lookup tool. [![DNS ](https://media.mailhop.org/duocircle/images/2024/11/spf-record-2942.jpg)](https://media.mailhop.org/duocircle/images/2024/11/spf-record-2942.jpg) ## Problem 3: Unable to verify DKIM status Follow these steps to fix DKIM issues- - Open your command prompt and run \`nslookup.\` - Then type: \`set q=TXT.\` - For DKIM issues, use ‘selector1.’ Run the command to check for **CNAME DKIM records**. If they appear in the output, Azure Email Communication Service can verify [DKIM](/resources/what-is-dkim). If the records are missing, verification will fail, compromising email security and increasing the [risk of spoofing](https://www.securityweek.com/vulnerabilities-enable-attackers-to-spoof-emails-from-20-million-domains/) and delivery issues. ## Topics DKIMDMARCemail securityspfSPF record ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) ## Related Articles [ Email Hosting 3m How do we fix the custom domain configuration problems for Azure Email Communication? Nov 29, 2024 ](/blog/email-hosting/fix-custom-domain-configuration-issues-azure-email-communication/)[ Email Hosting 14m Inbox Wars: Winning with Powerful SMTP Email Hosting Apr 7, 2026 ](/blog/email-hosting/inbox-wars-winning-with-powerful-smtp-email-hosting/)[ DMARC 6m How to become a DMARC expert: a 6-step learning path Sep 24, 2024 ](/blog/dmarc/a-detailed-guide-on-becoming-a-dmarc-expert/)[ DMARC 7m Cloudflare’s new SPF, DKIM, and DMARC requirements Jul 18, 2025 ](/blog/dmarc/cloudflares-new-spf-dkim-and-dmarc-requirements/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Fixing custom domain configuration problems for Azure Email Communication Services","description":"Fixing custom domain configuration problems for Azure Email Communication Services.","url":"https://www.duocircle.com/blog/email-hosting/fixing-custom-domain-configuration-problems-for-azure-email-communication-services/","datePublished":"2024-11-01T12:28:00.000Z","dateModified":"2025-08-21T18:14:25.000Z","dateCreated":"2024-11-01T12:28:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-hosting/fixing-custom-domain-configuration-problems-for-azure-email-communication-services/"},"articleSection":"email-hosting","keywords":"DKIM, DMARC, email security, spf, SPF record","wordCount":488,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/11/spf-record-2941.jpg","caption":"domain configuration","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Email Hosting"},{"@type":"ListItem","position":3,"name":"Fixing custom domain configuration problems for Azure Email Communication Services","item":"https://www.duocircle.com/blog/email-hosting/fixing-custom-domain-configuration-problems-for-azure-email-communication-services/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Email Hosting","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Fixing custom domain configuration problems for Azure Email Communication Services","item":"https://www.duocircle.com/blog/email-hosting/fixing-custom-domain-configuration-problems-for-azure-email-communication-services/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Fixing custom domain configuration problems for Azure Email Communication Services","description":"Fixing custom domain configuration problems for Azure Email Communication Services.","url":"https://www.duocircle.com/blog/email-hosting/fixing-custom-domain-configuration-problems-for-azure-email-communication-services/","datePublished":"2024-11-01T12:28:00.000Z","dateModified":"2025-08-21T18:14:25.000Z","dateCreated":"2024-11-01T12:28:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-hosting/fixing-custom-domain-configuration-problems-for-azure-email-communication-services/"},"articleSection":"email-hosting","keywords":"DKIM, DMARC, email security, spf, SPF record","wordCount":488,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/11/spf-record-2941.jpg","caption":"domain configuration","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```