Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.


When you try to convert an existing domain from standard authentication to federated authentication in Microsoft SharePoint Online by using the Convert-MSOLDomaintoFederated cmdlet, you receive the following error message:

PS C:\Windows\system32> Convert-MsolDomainToFederated -DomainName <>
Convert-MsolDomainToFederated :
At line:1 char:30
+ Convert-MsolDomainToFederated <<<< -DomainName <>
+ CategoryInfo : NotSpecified: (:) [Convert-MsolDomainToFederated],
FederationException + FullyQualifiedErrorId :


This issue occurs because the "Password expiry duration" policy in SharePoint Online is not set to the default value of 90 days.


To resolve this issue, set the "Password expiry duration" policy to the default setting by using the following cmdlet:

Set-MsolPasswordPolicy -ValidityPeriod 90 -NotificationDays 14 -DomainName

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?

Thank you for your feedback!