You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
An application’s publisher domain is displayed to users on the [application’s consent prompt](application-consent-experience.md) to let users know where their information is being sent. Multi-tenant applications that are registered after May 21, 2019 that don't have a publisher domain show up as**unverified**. Multi-tenant applications are applications that support accounts outside of a single organizational directory; for example, support all Azure AD accounts, or support all Azure AD accounts and personal Microsoft accounts.
20
+
An application’s publisher domain informs the users where their information is being sent and acts as an input/prerequisite for [publisher verification](publisher-verification-overview.md). Depending on when the app was registered and it's verified publisher status, publisher domain may be displayed directly to the user on the [application's consent prompt](application-consent-experience.md). [Multi-tenant applications](/azure/architecture/guide/multitenant/overview) that are registered after May 21, 2019, that don't have a publisher domain show up as**unverified**. Multi-tenant applications are applications that support accounts outside of a single organizational directory; for example, support all Azure AD accounts, or support all Azure AD accounts and personal Microsoft accounts.
21
21
22
22
## New applications
23
23
@@ -33,11 +33,16 @@ The following table summarizes the default behavior of the publisher domain valu
If a multi-tenant application's publisher domain isn't set, or if it's set to a domain that ends in .onmicrosoft.com, the app's consent prompt will show **unverified** in place of the publisher domain.
37
-
36
+
1. If your multi-tenant was registered between **May 21, 2019 and November 30, 2020**:
37
+
- If the application's publisher domain isn't set, or if it's set to a domain that ends in .onmicrosoft.com, the app's consent prompt will show **unverified** in place of the publisher domain.
38
+
- If the application has a verified app domain, the consent prompt will show the verified domain.
39
+
- If the application is publisher verified, it will show a [blue "verified" badge] (publisher-verification-overview.md) indicating the same
40
+
2. If your multi-tenant was registered after **November 30, 2020**:
41
+
- If the application is not publisher verified, the app will show as "**unverified**" in the consent prompt (i.e, no publisher domain related info is shown)
42
+
- If the application is publisher verified, it will show a [blue "verified" badge] (publisher-verification-overview.md) indicating the same
38
43
## Grandfathered applications
39
44
40
-
If your app was registered before May 21, 2019, your application's consent prompt will not show **unverified** if you have not set a publisher domain. We recommend that you set the publisher domain value so that users can see this information on your app's consent prompt.
45
+
If your app was registered before May 21, 2019, your application's consent prompt will not show **unverified**even if you have not set a publisher domain. We recommend that you set the publisher domain value so that users can see this information on your app's consent prompt.
41
46
42
47
## Configure publisher domain using the Azure portal
43
48
@@ -97,11 +102,15 @@ Configuring the publisher domain has an impact on what users see on the app cons
97
102
98
103
The following table describes the behavior for applications created before May 21, 2019.
99
104
100
-

105
+

106
+
107
+
The behavior for applications created between May 21, 2019 and November 30, 2020 will depend on the publisher domain and the type of application. The following table describes what is shown on the consent prompt with the different combinations of configurations.
108
+
109
+

101
110
102
-
The behavior for new applications created after May 21, 2019 will depend on the publisher domain and the type of application. The following table describes the changes you should expect to see with the different combinations of configurations.
111
+
For multi-tenant applications created after November 30, 2020, only publisher verification status is surfaced in the consent prompt. The following table describes what is shown on the consent prompt depending on whether an app is verified or not. Consent prompt for single tenant applications will remain the same as above.
103
112
104
-

113
+

Copy file name to clipboardExpand all lines: articles/active-directory/develop/publisher-verification-overview.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -42,7 +42,7 @@ Publisher verification provides the following benefits:
42
42
## Requirements
43
43
There are a few pre-requisites for publisher verification, some of which will have already been completed by many Microsoft partners. They are:
44
44
45
-
- An MPN ID for a valid [Microsoft Partner Network](https://partner.microsoft.com/membership) account that has completed the [verification](/partner-center/verification-responses) process. This MPN account must be the [Partner global account (PGA)](/partner-center/account-structure#the-top-level-is-the-partner-global-account-pga) for your organization.
45
+
- An MPN ID for a valid [Microsoft Partner Network](https://partner.microsoft.com/membership) account that has completed the [verification](/partner-center/verification-responses) process. This MPN account must be the [Partner global account (PGA)](/partner-center/account-structure#the-top-level-is-the-partner-global-account-pga) for your organization. (**NOTE**: It can't be the Partner Location MPN ID. Location MPN IDs aren't currently supported)
46
46
47
47
- The application to be publisher verified must be registered using a Azure AD account. Applications registered using a Microsoft personal account aren't supported for publisher verification.
48
48
@@ -56,7 +56,7 @@ There are a few pre-requisites for publisher verification, some of which will ha
56
56
57
57
- In Azure AD this user must be a member of one of the following [roles](../roles/permissions-reference.md): Application Admin, Cloud Application Admin, or Global Admin.
58
58
59
-
- In Partner Center this user must have of the following [roles](/partner-center/permissions-overview): MPN Admin, Accounts Admin, or a Global Admin (this is a shared role mastered in Azure AD).
59
+
- In Partner Center this user must have of the following [roles](/partner-center/permissions-overview): MPN Partner Admin, Account Admin, or a Global Admin (this is a shared role mastered in Azure AD).
60
60
61
61
- The user performing verification must sign in using [multi-factor authentication](../authentication/howto-mfa-getstarted.md).
0 commit comments