GoDaddy Microsoft 365 Defederation & Tenant Takeover
GoDaddy Microsoft 365 Defederation & Tenant Takeover moves your Microsoft 365 tenant out from under GoDaddy's control — without migrating anywhere. IT Partner plans and executes the defederation: replacement licensing is staged first, the domain is converted from GoDaddy's federated sign-on to standard Microsoft sign-in, every user gets working credentials, GoDaddy's delegated administration is removed, and billing moves to a direct Microsoft relationship through IT Partner as your CSP. Your mailboxes, files, and Teams stay exactly where they are — you keep the tenant, you lose the middleman.
What this engagement is
Microsoft 365 bought through GoDaddy is not quite yours. GoDaddy provisions the tenant with its own federated sign-on, holds delegated administrative access, controls the billing relationship, and limits which admin capabilities you can reach. Leaving that arrangement is called defederation — and done casually, it locks every user out of email at once. This service is the careful version. IT Partner stages replacement Microsoft 365 licenses before anything changes, converts your domain from GoDaddy's federated authentication to standard Microsoft Entra managed sign-in, resets and distributes credentials so every user can sign in the moment the switch happens, takes over global administration, removes GoDaddy's delegated access, and closes out the GoDaddy subscriptions only after the tenant is verifiably self-sufficient. Unlike a tenant-to-tenant migration, nothing moves: mailboxes, OneDrive files, SharePoint sites, and Teams all stay in place, because the tenant was always yours — only the sign-in path, administration, and billing change hands. If you would rather consolidate into a different existing tenant, the sibling service GoDaddy Microsoft 365 to Microsoft 365 Tenant-to-Tenant Cutover Email Migration covers that path instead; we help you choose in the first call.
Success criteria
What you receive
How the work unfolds
Inventory GoDaddy subscriptions, licensing, domains, users, and delegated access; agree the cutover window and communication plan.
Purchase and assign replacement Microsoft 365 licenses so no user has a coverage gap at any point.
Convert the domain from GoDaddy federated sign-on to Microsoft Entra managed authentication and reset user credentials in the agreed window.
Confirm Global Administrator control, remove GoDaddy delegated administration, re-establish MFA, and verify user sign-in and data integrity.
Cancel GoDaddy subscriptions after verification, confirm billing on the new relationship, and deliver the closeout report.
Prerequisites
Who does what
IT Partner
- Lead the readiness assessment, cutover plan, and change-window scheduling
- Stage and assign replacement licensing before defederation
- Execute the domain authentication conversion and credential resets
- Take over and document tenant administration and remove GoDaddy delegated access
- Verify user sign-in, MFA, and data integrity after cutover
- Coordinate the GoDaddy subscription closeout and deliver the closeout report
Your team
- Provide GoDaddy account access and current admin credentials
- Approve the replacement licensing purchase and the cutover window
- Distribute communications to users and coordinate first-day sign-in support
- Provide a dedicated point of contact during the cutover window
- Review and approve engagement deliverables in a timely manner
What's not included
Limitations & technical notes
Frequently asked questions
What does GoDaddy defederation actually mean?
Microsoft 365 sold through GoDaddy uses GoDaddy's own federated sign-on: your users authenticate through GoDaddy's identity system, not directly with Microsoft. Defederation converts your domain back to standard Microsoft Entra managed authentication, so sign-in, administration, and billing no longer route through GoDaddy. Your tenant, mailboxes, and files never move — they were always in Microsoft's cloud; what changes is who controls the front door.
Will we lose email or files?
No — provided the sequencing is right, which is the core of this service. Replacement licenses are purchased and assigned before anything is cancelled, the authentication switch is planned with working credentials ready for every user, and GoDaddy subscriptions are closed only after the tenant is verified self-sufficient. Mailboxes, OneDrive, SharePoint, and Teams stay exactly where they are.
What do our users experience on cutover day?
They sign in with new credentials and re-register multifactor authentication. That is the whole visible change, and it is announced in advance with instructions we help you prepare. Their email address, mailbox, files, and Teams are untouched.
Do we have to move our domain away from GoDaddy?
No. The domain can stay registered at GoDaddy indefinitely — domain registration and Microsoft 365 federation are separate things. Only the Microsoft 365 sign-on, administration, and billing relationships change.
How is this different from your GoDaddy tenant-to-tenant migration service?
Defederation keeps your existing tenant and removes GoDaddy's control of it — nothing migrates. The tenant-to-tenant cutover migration moves your mailboxes into a different tenant, which is the right path when you are consolidating with another organization or want a fresh start. Most GoDaddy customers only need defederation; we confirm which fits in the first call.
What happens to our Microsoft 365 licenses and billing?
Your GoDaddy-billed subscriptions are replaced with direct Microsoft licensing — typically through IT Partner as your Cloud Solution Provider at the same Microsoft price, or another direct agreement if you prefer. The replacement is staged before the switch so there is no coverage gap, and GoDaddy billing ends when its subscriptions are closed out.
Why not just call GoDaddy and cancel?
Because cancelling first is the disaster path: when a GoDaddy Microsoft 365 subscription lapses before licenses are replaced and federation is removed, users lose access and mailbox data is at risk. Defederation done safely is a sequence — license first, authenticate second, take over third, cancel last — and that sequence is exactly what this engagement delivers.