First page of Microsoft's 100,000-partner directory, sorted by responsiveness Microsoft Solutions Partner — Security, Modern Work, Infrastructure, App Innovation Microsoft partner since 2006 1,100+ organizations under management
Home/Services/GoDaddy Microsoft 365 Defederation & Tenant Takeover
Migration

GoDaddy Microsoft 365 Defederation & Tenant Takeover

GoDaddy Microsoft 365 Defederation & Tenant Takeover moves your Microsoft 365 tenant out from under GoDaddy's control — without migrating anywhere. IT Partner plans and executes the defederation: the domain is converted from GoDaddy's federated sign-on to standard Microsoft sign-in, users keep the credentials and MFA registrations they already have, GoDaddy's delegated administration is removed, replacement licensing is switched as the last step, and billing moves to a direct Microsoft relationship through IT Partner as your CSP. Your mailboxes, files, and Teams stay exactly where they are — you keep the tenant, you lose the middleman.

Timeline 2 daysService owner Roman SotnikOffice 365microsoft 365

What this engagement is

Microsoft 365 bought through GoDaddy is not quite yours. GoDaddy provisions the tenant with its own federated sign-on, holds delegated administrative access, controls the billing relationship, and limits which admin capabilities you can reach. Leaving that arrangement is called defederation — and done casually, it locks every user out of email at once. This service is the careful version. IT Partner converts your domain from GoDaddy's federated authentication to standard Microsoft Entra managed sign-in — users keep the credentials they already have — takes over global administration, removes GoDaddy's delegated access, switches licensing to a direct Microsoft relationship as the last step, and closes out the GoDaddy subscriptions only after the tenant is verifiably self-sufficient. Unlike a tenant-to-tenant migration, nothing moves: mailboxes, OneDrive files, SharePoint sites, and Teams all stay in place, because the tenant was always yours — only the sign-in path, administration, and billing change hands. If you would rather consolidate into a different existing tenant, the sibling service GoDaddy Microsoft 365 to Microsoft 365 Tenant-to-Tenant Cutover Email Migration covers that path instead; we help you choose in the first call.

Success criteria

01Replacement Microsoft 365 licensing is switched as the last step of the engagement, with no coverage gap for any user.
02The custom domain authenticates through standard Microsoft Entra managed sign-in; GoDaddy federated sign-on is fully removed.
03Every user keeps their existing credentials and signs in normally immediately after the cutover; existing MFA registrations continue to work — no re-registration is required.
04The client holds Global Administrator control of the tenant, and GoDaddy delegated administrative access is removed.
05Mailboxes, OneDrive, SharePoint, and Teams data are confirmed intact — nothing is migrated, nothing is lost.
06GoDaddy Microsoft 365 subscriptions are cancelled only after license replacement and tenant control are verified, and billing runs through the new direct relationship.

What you receive

Defederation readiness assessment: current GoDaddy subscriptions and licensing, domain and DNS state, user inventory, sign-in and MFA posture, and delegated-administration relationships.
Cutover plan with sequencing, rollback points, user-communication templates, and a scheduled change window agreed with you.
Replacement licensing staged through IT Partner as CSP (or your chosen direct agreement) and assigned as the last step, once the tenant is verified self-sufficient.
Domain authentication converted from GoDaddy federation to Microsoft Entra managed sign-in.
First-day sign-in support materials confirming that users keep their existing credentials and MFA registrations — no resets, no re-registration.
Global Administrator takeover documented, GoDaddy delegated access removed, and a post-cutover security review of admin accounts.
GoDaddy subscription closeout after verification, and a closeout report covering final state, acceptance criteria, and any outstanding items.

How the work unfolds

Assessment and plan

Inventory GoDaddy subscriptions, licensing, domains, users, and delegated access; agree the cutover window and communication plan.

Defederation cutover

Convert the domain from GoDaddy federated sign-on to Microsoft Entra managed authentication in the agreed window; users keep their existing credentials.

Takeover and cleanup

Confirm Global Administrator control, remove GoDaddy delegated administration, confirm existing MFA registrations still work, and verify user sign-in and data integrity.

License switch

Purchase and assign replacement Microsoft 365 licenses as the last step, once the tenant is verified self-sufficient — no user has a coverage gap at any point.

Closeout

Cancel GoDaddy subscriptions after verification, confirm billing on the new relationship, and deliver the closeout report.

Prerequisites

Access to the GoDaddy account that holds the Microsoft 365 subscriptions, and to the GoDaddy-provided Microsoft 365 admin credentials.
Authority to purchase replacement Microsoft 365 licensing before the GoDaddy subscriptions are cancelled.
A user contact list for cutover communications, and agreement on the cutover window — users keep their existing credentials and MFA registrations, so no resets or re-registration are needed on the day.
DNS access for any records that need adjusting; the domain itself can remain registered at GoDaddy.

Who does what

IT Partner

  • Lead the readiness assessment, cutover plan, and change-window scheduling
  • Purchase and assign replacement licensing as the last step, after tenant control is verified
  • Execute the domain authentication conversion — users keep their existing credentials
  • Take over and document tenant administration and remove GoDaddy delegated access
  • Verify user sign-in, MFA, and data integrity after cutover
  • Coordinate the GoDaddy subscription closeout and deliver the closeout report

Your team

  • Provide GoDaddy account access and current admin credentials
  • Approve the replacement licensing purchase and the cutover window
  • Distribute communications to users and coordinate first-day sign-in support
  • Provide a dedicated point of contact during the cutover window
  • Review and approve engagement deliverables in a timely manner

What's not included

Tenant-to-tenant data migration — if you are consolidating into another existing tenant, that is the sibling service GoDaddy Microsoft 365 to Microsoft 365 Tenant-to-Tenant Cutover Email Migration.
Domain transfer away from GoDaddy's registrar, website or hosting moves, and non-Microsoft services in the GoDaddy account — the domain can stay registered at GoDaddy throughout.
New security architecture beyond restoring your pre-cutover posture — Conditional Access design, Intune rollout, and security baselines are separately scoped follow-on work.
Ongoing administration and end-user support after the closeout report, unless separately contracted.

Limitations & technical notes

!Sequencing is everything in a defederation: the authentication conversion is verified first — every user signing in with the credentials they already have — before GoDaddy's delegated access is removed, and replacement licenses are in place before any GoDaddy subscription is cancelled. This service exists because doing those steps out of order locks users out of email or, at worst, loses mailbox data when a subscription lapses.
!During the cutover window, sign-in briefly converts from GoDaddy federated authentication to Microsoft Entra managed sign-in — users keep their existing credentials and MFA registrations. A short, well-communicated change window is still planned for; a silent, zero-touch switch is not technically possible because GoDaddy's federated sign-in must be replaced.
!The engagement restores your tenant to standard Microsoft sign-in and direct control; it does not change your data, mailboxes, or configuration beyond authentication, administration, and billing.
!Technical content reviewed August 2026.

Frequently asked questions

What does GoDaddy defederation actually mean?

Microsoft 365 sold through GoDaddy uses GoDaddy's own federated sign-on: your users authenticate through GoDaddy's identity system, not directly with Microsoft. Defederation converts your domain back to standard Microsoft Entra managed authentication, so sign-in, administration, and billing no longer route through GoDaddy. Your tenant, mailboxes, and files never move — they were always in Microsoft's cloud; what changes is who controls the front door.

Will we lose email or files?

No — provided the sequencing is right, which is the core of this service. The authentication switch is planned so every user keeps signing in with their existing credentials, replacement licenses are purchased and assigned as the last step but before anything is cancelled, and GoDaddy subscriptions are closed only after the tenant is verified self-sufficient. Mailboxes, OneDrive, SharePoint, and Teams stay exactly where they are.

What do our users experience on cutover day?

Nothing changes for them: users keep their existing usernames, passwords, and MFA registrations, and simply keep signing in as before. The switch is still announced in advance, with instructions we help you prepare. Their email address, mailbox, files, and Teams are untouched.

Do we have to move our domain away from GoDaddy?

No. The domain can stay registered at GoDaddy indefinitely — domain registration and Microsoft 365 federation are separate things. Only the Microsoft 365 sign-on, administration, and billing relationships change.

How is this different from your GoDaddy tenant-to-tenant migration service?

Defederation keeps your existing tenant and removes GoDaddy's control of it — nothing migrates. The tenant-to-tenant cutover migration moves your mailboxes into a different tenant, which is the right path when you are consolidating with another organization or want a fresh start. Most GoDaddy customers only need defederation; we confirm which fits in the first call.

What happens to our Microsoft 365 licenses and billing?

Your GoDaddy-billed subscriptions are replaced with direct Microsoft licensing — typically through IT Partner as your Cloud Solution Provider at the same Microsoft price, or another direct agreement if you prefer. The license switch is the last step of the engagement, made once the tenant is verified self-sufficient so there is no coverage gap, and GoDaddy billing ends when its subscriptions are closed out.

Why not just call GoDaddy and cancel?

Because cancelling first is the disaster path: when a GoDaddy Microsoft 365 subscription lapses before licenses are replaced and federation is removed, users lose access and mailbox data is at risk. Defederation done safely is a sequence — convert authentication first, take over administration second, switch licenses as the last step, and only then cancel — and that sequence is exactly what this engagement delivers.

Didn’t find your question?

Ask it here. A real engineer answers by email within one business day — and if it’s a good one, it becomes part of this page so the next person finds it.

Answered by a person, one time, to your inbox. Nothing you type here is published without a human reviewing and anonymizing it first.

Often combined with

$525 per project
2 days
Book a defederation call