01 · Foundations

The tenant boundary

Every later object, from a dial plan to a recorder, lives in one tenant. Pairing an SBC in the wrong tenant is a different phone system.

Room HTMLAll downloads

Learn it in 5 minutes

A Microsoft 365 tenant holds Entra ID, the license pool, Teams policies, and the verified domains. Direct Routing will only pair an SBC FQDN that belongs to one of those verified domains. The default onmicrosoft.com domain is not eligible.

Before you discuss codecs, say which tenant you are in and whether the users are homed online. Direct Routing is not supported in Islands mode. Those two checks end more outages than a firmware upgrade.

The tenant is the boundary. Pair an SBC only on a verified domain, and do not use Direct Routing for Islands users.

Room HTML

Visual

SIP over TLS toward the carrierTeamsProxySBC-AINVITE100INVITE180200ACK
Signaling for The tenant boundary. Teams keeps the dialog. A 488 is codecs, not a greeting.
What must exist firstDomain · VerifiedUsers · Homed onlineMode · Not IslandsFQDN · Paired
Sequence, not a count of customers. Counts in this drawing are teaching order, not customers.

SVGPNGHTML

Worked example

Name the tenant, the verified domain, and that onmicrosoft.com cannot be the SBC name.

  1. Tenant Verified domains
  2. Entra Users and resource accounts
  3. Policy Voice routing later
  4. SBC FQDN in that domain

If it fails: Pairing fails because the FQDN’s domain was never added to this tenant.

Checklist HTML

Quiz

Which description of Microsoft 365 tenant is accurate?

A colleague reports: Two engineers edit two tenants and each thinks the other broke the trunk. Where do you start?

Which description of Verified domain is accurate?

Flashcards

Ecosystem

Glossary

  • Microsoft 365 tenant The boundary that holds Entra ID, licenses, Teams policies, and verified domains for one organization. Config: Confirm the tenant before you run Connect-MicrosoftTeams. Fault: Two engineers edit two tenants and each thinks the other broke the trunk.
  • Verified domain A domain added and proven in the tenant. Direct Routing SBC FQDNs must live on one of these domains. Config: Add the domain, including a sip subdomain, before you pair the gateway. Fault: Pairing fails because sbc.contoso.com was never verified.
  • onmicrosoft.com domain The default tenant domain. It is not a supported domain for a Direct Routing SBC FQDN. Config: Use a domain you verified, such as contoso.com. Fault: The gateway object is rejected or never becomes healthy.
  • Homed online Direct Routing users must be homed in Microsoft 365, not left on a Skype for Business on-premises registrar. Config: Check the user’s registrar before you assign a voice routing policy. Fault: The policy is assigned and the call never leaves the legacy system.

Sister technologies

Around the call: compliance recording, workforce management, emergency location, analytics, CRM screen pop, and an agent with a human escape. Each one has its own failure.

Config and troubleshooting

Pairing fails because the FQDN’s domain was never added to this tenant.

Cross-platform bridges

CUCM

Cisco CUBE is one of the SBC families named in this lab’s certification lesson. A certified release can be the Direct Routing SBC between Unified CM and Teams.

The tenant still needs a verified domain on the SBC FQDN, and the user still needs Teams Phone. The studio translator does not open a live AXL session. Confirm the current certified release before you build.

Webex

Teams Phone and Webex Calling are separate clouds. This lab does not describe a feature that registers a Webex Calling user into a Teams tenant.

A number move is usually a carrier port, a certified SBC, or a meetings interop product. Confirm before relying.

UCCE

Unified CCE stays the ACD until you migrate it. Microsoft’s contact-center articles name Connect, Extend, and Unify. They do not name a UCCE connector in the notes this lab cites.

Voice into Teams is still Direct Routing or Operator Connect. The routing script stays on the contact-center product you bought. Confirm the vendor’s current model. Source: https://learn.microsoft.com/en-us/microsoftteams/teams-contact-center.

Future hooks

Copilot Studio, Azure Communication Services, and Graph are later tracks in this lab. Treat any uncited limit as confirm before relying.

BridgesEcosystem

Sources and go deeper

Opened 2026-10. A row marked confirm did not open. Wikipedia is background. The Teams blog row is the community index.

  • Plan Direct Routing — Microsoft Learn — last checked 2026-10.
  • Use Teams admin roles — Microsoft Learn — last checked 2026-10.
  • Microsoft 365 — Wikipedia — last checked 2026-10. Wikipedia fallback for background. Confirm the vendor page before you change a tenant
  • Microsoft Teams — Wikipedia — last checked 2026-10. Wikipedia fallback for background. Confirm the vendor page before you change a tenant
  • Microsoft Teams blog index — Community — last checked 2026-10. Community index for the Microsoft Teams blog. This is the index, not a claim that a post discusses this room

sources.json