Check this in this order:
1. tenant domain must resolve to a IP or you must use Proxy settings
in your phone
2. your tenant domain must not exceed 63 characteers (DNS restriction)
3. registar setting on your phone must be using the tenant domain, not the IP
if you only get 401 answers, that means you are not sending the authentication
if you get 403 answers, means you are sending wrong authentication