OneLogin - MOERA notice from Microsoft and impact with OneLogin (4383142)

OneLogin - MOERA notice from Microsoft and impact with OneLogin

Users may receive a notice regarding MOERA (Microsoft Online Email Routing Address). Microsoft is limiting the ability to send outbound emails from the default onmicrosoft.com domain. If you do not change your default domain to a custom one by the specified deadline, your outgoing emails may be "throttled" (significantly slowed down) or blocked entirely.

Microsoft is implementing these limits to improve security. Default domains are often used by bad actors for spam and phishing. By requiring customers to use a verified custom domain, Microsoft can better verify the identity of the sender and reduce the amount of junk email on their network.

To fix this, you must set a custom domain as your default in the Microsoft 365 Admin Center; ensure you do not select the "federated" domain used for OneLogin sign-ins, as Microsoft prohibits domains connected to external sign-in services from being the default.

Step 1: Log In Sign in to the Microsoft 365 admin center using an administrator account to access organization-wide settings.

Step 2: Go to Domains Navigate to Settings and select Domains from the left-hand menu to manage the web addresses associated with your account.

Step 3: Choose a Custom Domain Select a custom domain from your list, verifying that it is not the specific domain used for OneLogin authentication.

Step 4: Set as Default Click Set as default to establish this domain as the primary address for outgoing system emails, satisfying new security requirements.

The deadline for this change depends on how many "seats" (user licenses) your organization has. The rollout begins with trial accounts in October 2025 and continues through June 2026 for very large organizations. If you do not already have a second custom domain available, you will need to purchase a new one to use as your default.