how to change from federated to managed domain.

Global Admin 0 Reputation points
2025-05-28T06:52:05.41+00:00

my domain is federated for a long time.

I federated my domain by commandlet "Set-MsolDomainAuthentication" which is not applicable anymore.

but now I need to convert back to managed from federated.

https://learn.microsoft.com/en-us/answers/questions/573937/federated-to-managed-authentication

and old commandlet

Set-MsolDomainAuthentication -Authentication Managed -DomainName <domain name>

is not applicable any more?

how to do it?

best regards.

Microsoft Security | Microsoft Entra | Microsoft Entra Internet Access
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Anonymous
    2025-05-28T07:09:24.3433333+00:00

    Hello @Global Admin

    As I understand you have changed the domain from managed to federated. You want to move the domain back from federated to managed.

    You will have to run PowerShell commands to convert domain from federated to managed.

    To perform this all you need is access to federation server and global admin account which has ".onmicrosoft.com" suffix.

    You can run below commands in PowerShell from the device which is a federation server.

    • Open Windows PowerShell as administrator.
    • Run command "Install-Module MSOnline"

    Connect to Azure AD using below commands.

    • Connect-Msolservice (Enter global admin credentials which has ".onmicrosoft.com" suffix.)
    • Convert-MsolDomainToStandard -DomainName <DomainName> (You will have to run this command if you are using ADFS for federation)

    If you are using any other identity provider for federation then you can replace above last command with below command,

    • Set-MsolDomainAuthentication -DomainName <DomainName> -Authentication Managed

    Let me know if you have any further questions


  2. Vasil Michev 121.4K Reputation points MVP Volunteer Moderator
    2025-05-28T07:15:16.22+00:00

    You can use the Update-MgDomain cmdlet from the Graph SDK for PowerShell, specifically:

    Update-MgDomain -DomainId domain.com -AuthenticationType "Managed"
    

    Of course make sure you are connecting with a user with sufficient permissions first, at minimum holding the Domain Name Administrator role and having the Domain.ReadWrite.All scope granted:

    Connect-MgGraph -Scopes Domain.ReadWrite.All
    
    0 comments No comments

  3. Deepak Singh 0 Reputation points
    2025-08-22T09:42:11.62+00:00

    Can someone help to federate the domain to o365 as MSOLService depreciated

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.