'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix Missing Microsoft Teams OTP Emails for External Subdomains
Question details
Guest users do not receive one-time passcode (OTP) emails when attempting to sign in.
- Product
- Microsoft Teams
- Device & OS
- not provided
- Scenario
- Guest users on an externally managed subdomain are trying to access Microsoft Teams.
- Observed behavior
- Instead of receiving the expected OTP emails, users receive standard sign-in invitations because the subdomain routing triggers a fallback flow.
Ensure you have at least Domain Name Administrator or Global Administrator privileges in your Microsoft Entra ID (formerly Azure AD) tenant to view and modify custom domain settings.
Verify the Custom Subdomain in Microsoft Entra ID
Microsoft Entra ID requires proper domain verification to correctly route OTP emails rather than defaulting to standard sign-in invitations.
When external subdomains are unverified in your tenant, Microsoft's identity platform cannot safely route the one-time passcode emails, treating the users strictly as external guests requiring full invitation redemption. Verifying the subdomain resolves this.
Navigate to the Microsoft Entra admin center and log in with your administrator credentials.
Go to 'Identity', then select 'Settings', click on 'Domain names', and choose 'Custom domain names'.
If the external subdomain is not listed, click 'Add custom domain' and enter the domain name. If it is listed but unverified, click on it.
Follow the on-screen instructions to add the provided TXT or MX record to the domain's DNS settings. Once the DNS propagates, click 'Verify'.
Contact Microsoft 365 Support for Tenant Assistance
If the subdomain is already verified and OTP emails are still not arriving, escalate the issue to Microsoft Support to check backend tenant routing.
Experience Seamless Collaboration with WPS Office
While resolving Microsoft Teams and Entra ID verification requires complex tenant administration, sharing and collaborating on documents doesn't have to be difficult. WPS Office provides a free, lightweight alternative to Microsoft Office, allowing seamless guest collaboration without complex domain setups.
- 1. Download WPS Office: Visit the official WPS website to download and install the free suite.
- 2. Open Office Files Natively: Directly open your existing Word, Excel, and PowerPoint files with zero formatting loss.
- 3. Share with Anyone: Use WPS Cloud to generate secure sharing links, allowing external guests to view or edit documents instantly without MFA hurdles.
Frequently Asked Questions
Why do external guest users receive sign-in invitations instead of OTPs?
This fallback behavior occurs when the domain or subdomain they belong to is not managed or verified in your organization's Microsoft Entra ID, prompting the system to use the standard guest invitation flow for security.
Can I use PowerShell to troubleshoot Teams OTP issues?
Yes, Microsoft Graph PowerShell can be used to check directory settings and guest access configurations. You can consult Microsoft PowerShell communities for scripts to verify B2B collaboration settings.
How long does custom subdomain verification take in Microsoft Entra ID?
While the verification button can be clicked immediately, DNS changes (TXT or MX records) can take anywhere from a few minutes to 72 hours to propagate across the internet.
