Building Tenant ID Finder: Exploring Microsoft endpoints for fun

UpdatedJune 25, 2025

Ben Climer is an IT professional in the Kansas City area.

Hi, I'm Ben Climer. I’ve been taking things apart and figuring out how they work for as long as I can remember. I built my first computer at age eight, mostly out of necessity after breaking the family one. By twelve, I was coding websites with streaming embedded music. As a teenager, I competed in national contests for web design and computer repair, and discovered early on that I enjoyed solving problems that others found frustrating.

After high school, I started working in IT, eventually spending over a decade in the MSP world. I held a mix of technical and leadership roles, often jumping between fixing urgent issues and planning long-term solutions. That experience shaped how I think about automation today. Automation started as something the MSP I was working for didn’t do, scripting, and turned in a career passion.

I now work at Rewst, where I help others build better workflows and automation. I focus on making tools that are reusable, easy to understand, and built to scale. I'm also involved in community training, internal process improvements, and building things like Schema Doctor to make technical work a little smoother for everyone.

Outside of work, I’m into cars, road trips, and co-hosting my podcast, Panda Award Show.

I live in Kansas City, Kansas, and I still find joy in chasing down bugs/issues that make no sense on paper.

Comments

Join the discussion

No comments yet. Be the first to comment.

More from this blog

Troubleshooting an Ender 5 After My Move: A Step-by-Step Journey

Should I have just bought a Bambu….probably, but where’s the fun in that? Bringing an Ender 5 back to life after years in storage is rarely as simple as powering it on. When I pulled mine out of the basement, I ran into a cascade of issues that range...

Sep 6, 20255 min read

Why We Started The Panda Award Show

The idea This idea’s been sitting in the back of my mind for a while now. I’ve wanted to create something for the version of me who was just getting started in IT unsure of where the road might lead, full of questions, and searching for stories that ...

Jun 25, 20252 min read

About Ben

Ben Climer is an IT professional in the Kansas City area. Hi, I'm Ben Climer. I’ve been taking things apart and figuring out how they work for as long as I can remember. I built my first computer at age eight, mostly out of necessity after breaking t...

Jun 1, 20252 min read

Lessons, Wins, and Conversations from MSPGeekCon 2025

I had the chance to attend MSPGeekCon this year, and I’m incredibly grateful to the team for giving me that opportunity. What I expected to be a fairly quiet booth presence turned into something much more productive and energizing. Here’s a recap of ...

May 7, 20253 min read

Lessons, Wins, and Conversations from MSPGeekCon 2025

Ben Climer

8 posts

Notes, tools, and stories from my path in IT and automation—built to share lessons, solve problems, and maybe save someone a few steps along the way.

In my day-to-day work supporting MSPs and building automations, I often found myself solving the same kinds of problems over and over. Sometimes the fix is small, like a PowerShell script or a DNS record check. Other times, a missing bit of context slows everything down, like knowing which Microsoft 365 tenant a domain belongs to.

That’s what sparked the idea behind tenantidfinder.com.

It started from a personal need. I was working through a list of domains and needed to find their associated Microsoft 365 tenant IDs. Not one or two, dozens. And doing it manually was quickly becoming a pain. I knew the information was publicly accessible with the right OpenID Connect call, but there wasn’t a quick, no-login tool to do it in bulk. So I built one.

The Problem

If you've worked at an MSP or supported clients with multiple brands, you're probably familiar with the mess that is tracking which domain belongs to which tenant. Sometimes there’s one tenant per brand, sometimes not. When a client asks you to verify something, or you’re building automation that needs a tenant ID, you're left hopping between portals, logging into each tenant, checking verified domains, and wasting a ton of time.

You can’t look up domains from a tenant ID (at least not easily or reliably), but thanks to OpenID Connect, you can look up the tenant ID from a domain. That tiny asymmetry is where this tool lives.

What It Does

tenantidfinder.com takes in a list of domains, just type or paste them in, and gives you back:

The tenant ID, pulled using an OpenID Connect .well-known discovery call.
MX, SPF, and DMARC DNS records, resolved using DNS over HTTPS.
Autodiscover CNAME records for Microsoft Exchange.
CSV export so you can save results or import them into another tool.

It’s designed to be dead simple. No login. No OAuth. Just paste and go.

This isn’t meant to replace complex domain tooling or security tools, but it fills a very specific gap: figuring out what tenant a domain belongs to and confirming it behaves like a typical Microsoft-hosted domain.

Technical Notes

The two core pieces of functionality are:

OpenID Connect for tenant discovery. Specifically, I’m querying https://login.microsoftonline.com/{domain}/.well-known/openid-configuration and parsing the returned JSON for the issuer value. That’s where the tenant ID is embedded.
DNS lookups via DNS over HTTPS. I’m using a public DoH endpoint (like Cloudflare or Google) to fetch DNS records. This means the lookups are consistent, fast, and don’t rely on browser or network-specific behavior.

Everything is built into a static site. There’s no backend, no logging, no analytics—just client-side JavaScript. That keeps it fast and private. You could use it on an airplane Wi-Fi connection or a locked-down client network and it would still do its job.

Why I Shared It

My friend Joel once told me to keep dropping “MSP cheat codes” in the form of LinkedIn posts. I liked that term. It sums up the spirit of this kind of work: solving problems just enough to turn them into tools or shortcuts for others.

That’s really why I built and shared Tenant ID Finder. Not just to save myself time, but to put something useful in the hands of other techs who run into the same wall. I’ve seen people do this the hard way, and while it’s not hard, it’s tedious and repetitive. If this tool saves someone 20 minutes or prevents a wrong tenant ID in a PowerShell script, I’m calling it a win.

Command Palette