When adding a *.onmicrosoft.com domain to the Okta Office 365 app, the following errors might be encountered:

• Federating to the 'Default' domain is not allowed. Please change your Office 365 domain for this app. domain=*.onmicrosoft.com

• Could not setup the domain federation with Office 365; please retry setting up the federation for this domain after a few hours.

• Office 365 WS-Federation

The first error is generated due to the *.onmicrosoft.com domain being set as the default domain.

The second error is returned because the *.onmicrosoft.com domain is the tenant domain.

• If the *.onmicrosoft.com domain selected for federation is set as the default domain, a different domain must be selected as the default domain.
• If the *.onmicrosoft.com domain selected for federation is the tenant domain, a different domain must be used for federation. A tenant domain is the domain created upon tenant setup.