Retiring a Microsoft 365 tenant; Identity/SSO: how do I avoid losing access to Microsoft Learn, Certifications, Communities, Partner Center and other accounts?
I'm preparing to permanently retire a Microsoft 365 tenant.
I've already handled the obvious aspects:
- OneDrive and SharePoint data exported or reviewed
- Email migrated elsewhere
- Domains moved away from Microsoft-hosted services
- Teams and collaboration content assessed
- Backups preserved
My concern is no longer data. It's identity.
Over the years I have used a work/school Microsoft identity as the default sign-in for a large number of Microsoft and third-party services. The tenant will eventually be deleted, meaning the underlying Entra ID identity will cease to exist. I use my own registered domains so I will keep the exact same email address (simply it won't be managed by exchange/M365 anymore).
I am trying to avoid discovering, months later, that I can no longer access a service because it was silently relying on that identity.
Examples of services I know are currently associated with the work identity include:
- Microsoft Learn
- Microsoft Certifications / Credentials
- Microsoft Fabric Community
- Microsoft Tech Community
- Partner Center
The larger challenge is identifying the services I may have forgotten.
So far I've looked at:
- MFA registrations
- Enterprise applications / service principals
- Browser profile information
- Browser history and authentication traces
Those sources provide hints, but none provides a definitive list of every service where the identity has been used.
For those who have already retired a Microsoft 365 tenant:
- How did you identify all external services still dependent on the tenant identity?
- Which Microsoft services required special handling before tenant deletion?
- Which services allowed you to move or associate the account with a personal Microsoft account?
- Is there any reliable way to inventory where a work/school Microsoft identity has been used for authentication?
- What were the most common "I wish I had checked that before deleting the tenant" surprises?
My objective is not to preserve tenant resources.
My objective is to preserve access to any accounts, profiles, certifications, communities, subscriptions, reputations, or services that currently depend on the work identity before the tenant is permanently removed.
I am of course one of those who had E3 Developer and is moving away (already planned because I want to own my data, but that gave it a boost ;) ).
Thanks!