Recorded 14 Oct 2026 at 10:19 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Omission of email claims with an unverified domain owner
Effective date: June 2023 Endpoints impacted: v2.0 and v1.0 Change For multi-tenant applications, emails that aren't domain-owner verified are omitted by default when the optional email claim is requested in a token payload. An email is considered to be domain-owner verified if: The domain belongs to the tenant where the user account resides, and the tenant admin has done verification of the domain. The email is from a Microsoft Account (MSA). The email is from a Google account. The email was used for authentication using the one-time passcode (OTP) flow. It should also be noted that Facebook and SAML/WS-Fed accounts don't have verified domains.
What it said
- Published
- 1 Jun 2023
- Product
- Microsoft Entra
Recorded links
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.