itmdc (itmdc) asked a question.
Federating to the Default domain is not allowed. Please change your Office 365 domain for this app. domain=example.com
Hi I recieve the above message when attempting to enable WS-Federation for an O365 Application. If I change to use their default admin@example.onmicrosoft.com (mailto:admin@example.onmicrosoft.com(mailto:admin@example.onmicrosoft.com)) golbal admin then I get the below message. Putting me in an infinite loop. We only have a single domain example.com in the O365 tenant. "Please provide credentials for an Office 365 administrator who belongs to a separate domain you are about to federate. If you don not have such a user, please create an Office 365 user 'admin@yourcompany.onmicrosoft.com' (mailto:'admin@yourcompany.onmicrosoft.com'(mailto:'admin@yourcompany.onmicrosoft.com')) that has the role 'Company Administrator' Any suggestions greatly appreciated.
Jonny the Okta support answer is wrong.
When you add a domain to O365, using the O365 admin portal, it alters your default domain to the new domain. O365 will not alow you to federate the default domain.
To allow federation to occur, you need to alter the default domain back to "yourdomain.onmicrosoft.com" For further information see https://support.okta.com/help/articles/Knowledge_Article/38682106-Microsoft-Office-365-Integration-Guide