By default, trust domain don't support: portal.azure.com. I suppose portal.azure.com should supported by default. 