Defederating from GoDaddy in Microsoft 365: Your Complete Guide to Reclaiming Full Control of Your Existing Tenant

At US 365 Cloud Consulting, we help organizations take back full ownership of their Microsoft 365 tenant by safely defederating from GoDaddy — all without creating a new tenant, migrating data, or risking loss of access to email, Teams, OneDrive, or SharePoint.If you’re stuck in GoDaddy’s portal, unable to manage licenses directly, add advanced security features, or work with a preferred Microsoft partner, this guide is for you. We’ll cover the basics of defederation, why organizations make the move, real-world examples, and the exact step-by-step process we follow to keep your current tenant fully operational the entire time.

What Is Defederation from GoDaddy in Microsoft 365?

When you originally purchased Microsoft 365 through GoDaddy, they set up your custom domain as federated. This means GoDaddy acts as the identity provider and redirects all admin and sign-in traffic through their portal. Defederation simply changes your domain from “Federated” to “Managed” authentication — putting you in direct control through the standard Microsoft 365 and Entra admin centers.

Your existing tenant, users, email addresses, data, and history all stay exactly where they are. There is no downtime for mail flow and no need to move anything to a brand-new tenant.

Why Organizations Defederate from GoDaddy

Many organizations we work with started with GoDaddy for convenience but quickly ran into limitations:

• Locked into GoDaddy’s simplified admin portal with missing advanced features
• Inability to purchase certain licenses or enable security tools directly from Microsoft
• Restricted partner access (you can’t easily add a CSP or Microsoft partner)
• Automatic redirects back to GoDaddy’s site for every admin task

Example 1 – Manufacturing organization

A production facility needed to enable advanced threat protection and work with a specialized Microsoft partner. After defederating, they gained full access to the Microsoft 365 admin center and layered on enterprise security features without any disruption to daily operations.

Example 2 – Professional services firm

An accounting practice wanted to switch to a more flexible licensing model and direct Microsoft billing. Defederation let them remove GoDaddy’s restrictions while keeping every user account, mailbox, and file intact.

Example 3 – Retail chain

They needed to integrate third-party identity providers and automate license management. Moving to managed authentication opened the door to modern Entra ID features they couldn’t access before.

In every case, the organization kept their existing tenant and simply removed GoDaddy’s control.

Recommended Steps to Defederate Your Current Microsoft 365 Tenant

We follow a proven, zero-downtime process that keeps you in control at every step. Perform these actions during a planned maintenance window and communicate password changes to users in advance.

1. Prepare Users and Gather Information (1–2 days)
   Identify the original GoDaddy admin account (usually something like admin@randomname.onmicrosoft.com). Notify users that passwords will be reset and they’ll need to sign back into Office apps and Outlook. Prepare a simple password list or temporary passwords.
2. Gain Full Tenant Admin Access
   Log into portal.azure.com or office.com with the original onmicrosoft.com admin account. Reset its password if needed. Open an incognito window, sign in, and complete the password change. This account now gives you the rights needed for the next steps.
3. Remove Federation with PowerShell (The Key Step)
   Install the Microsoft Graph PowerShell module if you don’t have it:
   • Install-Module Microsoft.Graph.Identity.DirectoryManagement -Scope CurrentUser
   • Connect-MgGraph -Scopes "Directory.Read.All","Domain.Read.All","Domain.ReadWrite.All","Directory.AccessAsUser.All" Get-MgDomain
   • Update-MgDomain -DomainId "yourdomain.com" -Authentication Managed Get-MgDomain
4. Your tenant is now under direct Microsoft control.
5. Reset All User Passwords
   Because authentication is now managed by Microsoft, everyone must sign in with a new password. Use the Microsoft 365 admin center (Users > Active users) or bulk PowerShell script to reset passwords and force a change on next sign-in. Distribute the new credentials securely.
6. Add New Licensing (Direct or CSP)
   Before GoDaddy licenses expire, purchase equivalent Microsoft 365 licenses in the admin.microsoft.com Billing section or through your chosen partner. Assign them to users. You can run both sets of licenses temporarily with no issue.
7. Remove GoDaddy as Delegated Admin
   In the Microsoft 365 admin center, go to Settings > Partner relationships. Find GoDaddy, select it, and remove all roles.
   Then in Entra admin center > Enterprise applications, search for “Partner Center Web App” and delete it. This step is critical — it prevents GoDaddy from having any remaining access.
8. Cancel GoDaddy Subscription
   Only after the steps above, log into your GoDaddy account and cancel the Microsoft 365 renewal. GoDaddy licenses will simply fall off at the end of the term and your new licenses will take over automatically.
9. Post-Defederation Cleanup and Verification
   Update any email security records (such as Proofpoint MX records) if applicable. Test sign-in, admin access, and email flow. Reconfigure any custom settings that were limited by GoDaddy. Train users on the new direct Microsoft sign-in experience.

Your tenant is now fully managed by you or your chosen partner — with no loss of data or access at any point.

Common Challenges and How to Overcome Them

• “Users can’t sign in after defederation” → This is expected. Resetting passwords in advance and communicating clearly prevents frustration.
• “GoDaddy still shows as a partner” → Remove roles and the Partner Center Web App application in Entra ID.
• “We use Proofpoint or other add-ons” → Update MX records and remove any GoDaddy-specific transport rules in Exchange Online.
• “Fear of losing the tenant” → Following the exact order above (especially removing delegated rights before cancellation) keeps everything safe.

Ready to Defederate from GoDaddy and Take Full Control?

Whether you want direct Microsoft billing, advanced security features, or to work with a trusted Microsoft partner, our team at US 365 Cloud Consulting makes the defederation process simple, safe, and predictable. We’ve guided organizations through this exact transition while keeping their current tenant 100% intact.

Contact us today for a free defederation readiness assessment. Let’s remove GoDaddy’s restrictions and unlock the full power of your Microsoft 365 tenant — without any disruption or data risk.

References

• Microsoft Learn – Manage domains in Microsoft 365
• Microsoft Learn – Microsoft Graph PowerShell documentation
• Microsoft 365 Admin Center – Partner relationships and licensing guidance
• Industry best practices for GoDaddy Microsoft 365 defederation (2025–2026)
• GoDaddy help resources for subscription cancellation