Microsoft is enhancing security in Exchange Online by updating federation information. Previously, this allowed unauthenticated users to retrieve all federated domain names for a tenant. The update, rolling out mid-June, will only return the domain specified in the query, preventing unauthorized exposure of tenant domain information.
This change has impact on retrieving primary domain (*.onmicrosoft.com) of a tenant. For more details, please refer to the
original announcement.