You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/develop/publisher-verification-overview.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ ms.workload: identity
11
11
ms.date: 06/01/2021
12
12
ms.author: ryanwi
13
13
ms.custom: aaddev
14
-
ms.reviewer: jesakowi
14
+
ms.reviewer: ardhanap, jesakowi
15
15
---
16
16
17
17
# Publisher verification
@@ -58,7 +58,7 @@ There are a few pre-requisites for publisher verification, some of which will ha
58
58
59
59
- In Partner Center this user must have of the following [roles](/partner-center/permissions-overview): MPN Admin, Accounts Admin, or a Global Admin (this is a shared role mastered in Azure AD).
60
60
61
-
- The user performing verification must sign in using [multifactor authentication](../authentication/howto-mfa-getstarted.md).
61
+
- The user performing verification must sign in using [multi-factor authentication](../authentication/howto-mfa-getstarted.md).
62
62
63
63
- The publisher agrees to the [Microsoft identity platform for developers Terms of Use](/legal/microsoft-identity-platform/terms-of-use).
Copy file name to clipboardExpand all lines: articles/active-directory/develop/troubleshoot-publisher-verification.md
+33-33Lines changed: 33 additions & 33 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,13 +12,13 @@ ms.workload: identity
12
12
ms.date: 10/21/2021
13
13
ms.author: ryanwi
14
14
ms.custom: aaddev
15
-
ms.reviewer: jesakowi
15
+
ms.reviewer: ardhanap, jesakowi
16
16
---
17
17
18
18
# Troubleshoot publisher verification
19
-
If you are unable to complete the process or are experiencing unexpected behavior with [publisher verification](publisher-verification-overview.md), you should start by doing the following if you are receiving errors or seeing unexpected behavior:
19
+
If you're unable to complete the process or are experiencing unexpected behavior with [publisher verification](publisher-verification-overview.md), you should start by doing the following if you're receiving errors or seeing unexpected behavior:
20
20
21
-
1. Review the [requirements](publisher-verification-overview.md#requirements) and ensure they have all been met.
21
+
1. Review the [requirements](publisher-verification-overview.md#requirements) and ensure they've all been met.
22
22
23
23
1. Review the instructions to [mark an app as publisher verified](mark-app-as-publisher-verified.md) and ensure all steps have been performed successfully.
24
24
@@ -32,13 +32,13 @@ Below are some common issues that may occur during the process.
32
32
-**I don’t know my Microsoft Partner Network ID (MPN ID) or I don’t know who the primary contact for the account is**
33
33
1. Navigate to the [MPN enrollment page](https://partner.microsoft.com/dashboard/account/v3/enrollment/joinnow/basicpartnernetwork/new)
34
34
1. Sign in with a user account in the org's primary Azure AD tenant
35
-
1. If an MPN account already exists, this will be recognized and you will be added to the account
35
+
1. If an MPN account already exists, this will be recognized and you'll be added to the account
36
36
1. Navigate to the [partner profile page](https://partner.microsoft.com/pcv/accountsettings/connectedpartnerprofile) where the MPN ID and primary account contact will be listed
37
37
38
38
-**I don’t know who my Azure AD Global Administrator (also known as company admin or tenant admin) is, how do I find them? What about the Application Administrator or Cloud Application Administrator?**
39
39
1. Sign in to the [Azure AD Portal](https://aad.portal.azure.com) using a user account in your organization's primary tenant
40
40
1. Navigate to [Role Management](https://aad.portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RolesAndAdministrators)
41
-
1.Click the desired admin role
41
+
1.Select the desired admin role
42
42
1. The list of users assigned that role will be displayed
43
43
44
44
-**I don't know who the admin(s) for my MPN account are**
@@ -48,23 +48,23 @@ Below are some common issues that may occur during the process.
48
48
1. Go to your [partner profile](https://partner.microsoft.com/pcv/accountsettings/connectedpartnerprofile) and verify that:
49
49
- The MPN ID is correct.
50
50
- There are no errors or “pending actions” shown, and the verification status under Legal business profile and Partner info both say “authorized” or “success”.
51
-
1. Go to the [MPN tenant management page](https://partner.microsoft.com/dashboard/account/v3/tenantmanagement) and confirm that the tenant the app is registered in and that you are signing with a user account from is on the list of associated tenants. To add an additional tenant, follow the instructions [here](/partner-center/multi-tenant-account). Be aware that all Global Admins of any tenant you add will be granted Global Admin privileges on your Partner Center account.
52
-
1. Go to the [MPN User Management page](https://partner.microsoft.com/pcv/users) and confirm the user you are signing in as is either a Global Admin, MPN Admin, or Accounts Admin. To add a user to a role in Partner Center, follow the instructions [here](/partner-center/create-user-accounts-and-set-permissions).
51
+
1. Go to the [MPN tenant management page](https://partner.microsoft.com/dashboard/account/v3/tenantmanagement) and confirm that the tenant the app is registered in and that you're signing with a user account from is on the list of associated tenants. To add another tenant, follow the instructions [here](/partner-center/multi-tenant-account). Be aware that all Global Admins of any tenant you add will be granted Global Admin privileges on your Partner Center account.
52
+
1. Go to the [MPN User Management page](https://partner.microsoft.com/pcv/users) and confirm the user you're signing in as is either a Global Admin, MPN Admin, or Accounts Admin. To add a user to a role in Partner Center, follow the instructions [here](/partner-center/create-user-accounts-and-set-permissions).
53
53
54
54
-**When I sign into the Azure AD portal, I do not see any apps registered. Why?**
55
-
Your app registrations may have been created using a different user account in this tenant, a personal/consumer account, or in a different tenant. Ensure you are signed in with the correct account in the tenant where your app registrations were created.
55
+
Your app registrations may have been created using a different user account in this tenant, a personal/consumer account, or in a different tenant. Ensure you're signed in with the correct account in the tenant where your app registrations were created.
56
56
57
57
-**I'm getting an error related to multi-factor authentication. What should I do?**
58
-
Ensure [multifactor authentication](../fundamentals/concept-fundamentals-mfa-get-started.md) is enabled and **required** for the user you are signing in with and for this scenario. For example, MFA could be:
59
-
- Always required for the user you are signing in with
58
+
Ensure [multi-factor authentication](../fundamentals/concept-fundamentals-mfa-get-started.md) is enabled and **required** for the user you're signing in with and for this scenario. For example, MFA could be:
59
+
- Always required for the user you're signing in with
60
60
-[Required for Azure management](../conditional-access/howto-conditional-access-policy-azure-management.md).
61
-
-[Required for the type of administrator](../conditional-access/howto-conditional-access-policy-admin-mfa.md) you are signing in with.
61
+
-[Required for the type of administrator](../conditional-access/howto-conditional-access-policy-admin-mfa.md) you're signing in with.
62
62
63
63
## Making Microsoft Graph API calls
64
64
65
-
If you are having an issue but unable to understand why based on what you are seeing in the UI, it may be helpful to perform further troubleshooting by using Microsoft Graph calls to perform the same operations you can perform in the App Registration portal.
65
+
If you're having an issue but unable to understand why based on what you are seeing in the UI, it may be helpful to perform further troubleshooting by using Microsoft Graph calls to perform the same operations you can perform in the App Registration portal.
66
66
67
-
The easiest way to make these requests is using[Graph Explorer](https://developer.microsoft.com/graph/graph-explorer). You may also consider other options like using [Postman](https://www.postman.com/), or using PowerShell to [invoke a web request](/powershell/module/microsoft.powershell.utility/invoke-webrequest).
67
+
The easiest way to make these requests is to use[Graph Explorer](https://developer.microsoft.com/graph/graph-explorer). You may also consider other options like using [Postman](https://www.postman.com/), or using PowerShell to [invoke a web request](/powershell/module/microsoft.powershell.utility/invoke-webrequest).
68
68
69
69
You can use Microsoft Graph to both set and unset your app’s verified publisher and check the result after performing one of these operations. The result can be seen on both the [application](/graph/api/resources/application) object corresponding to your app registration and any [service principals](/graph/api/resources/serviceprincipal) that have been instantiated from that app. For more information on the relationship between those objects, see: [Application and service principal objects in Azure Active Directory](app-objects-and-service-principals.md).
70
70
@@ -147,97 +147,97 @@ The following is a list of the potential error codes you may receive, either whe
147
147
148
148
### MPNAccountNotFoundOrNoAccess
149
149
150
-
The MPN ID you provided (`MPNID`) does not exist, or you do not have access to it. Provide a valid MPN ID and try again.
150
+
The MPN ID you provided (`MPNID`) doesn't exist, or you don't have access to it. Provide a valid MPN ID and try again.
151
151
152
152
Most commonly caused by the signed-in user not being a member of the proper role for the MPN account in Partner Center- see [requirements](publisher-verification-overview.md#requirements) for a list of eligible roles and see [common issues](#common-issues) for more information. Can also be caused by the tenant the app is registered in not being added to the MPN account, or an invalid MPN ID.
153
153
154
154
### MPNGlobalAccountNotFound
155
155
156
-
The MPN ID you provided (`MPNID`) is not valid. Provide a valid MPN ID and try again.
156
+
The MPN ID you provided (`MPNID`) isn't valid. Provide a valid MPN ID and try again.
157
157
158
158
Most commonly caused when an MPN ID is provided which corresponds to a Partner Location Account (PLA). Only Partner Global Accounts are supported. See [Partner Center account structure](/partner-center/account-structure) for more details.
159
159
160
160
### MPNAccountInvalid
161
161
162
-
The MPN ID you provided (`MPNID`) is not valid. Provide a valid MPN ID and try again.
162
+
The MPN ID you provided (`MPNID`) isn't valid. Provide a valid MPN ID and try again.
163
163
164
164
Most commonly caused by the wrong MPN ID being provided.
165
165
166
166
### MPNAccountNotVetted
167
167
168
-
The MPN ID (`MPNID`) you provided has not completed the vetting process. Complete this process in Partner Center and try again.
168
+
The MPN ID (`MPNID`) you provided hasn't completed the vetting process. Complete this process in Partner Center and try again.
169
169
170
-
Most commonly caused by when the MPN account has not completed the [verification](/partner-center/verification-responses) process.
170
+
Most commonly caused by when the MPN account hasn't completed the [verification](/partner-center/verification-responses) process.
171
171
172
172
### NoPublisherIdOnAssociatedMPNAccount
173
173
174
-
The MPN ID you provided (`MPNID`) is not valid. Provide a valid MPN ID and try again.
174
+
The MPN ID you provided (`MPNID`) isn't valid. Provide a valid MPN ID and try again.
175
175
176
176
Most commonly caused by the wrong MPN ID being provided.
177
177
178
178
### MPNIdDoesNotMatchAssociatedMPNAccount
179
179
180
-
The MPN ID you provided (`MPNID`) is not valid. Provide a valid MPN ID and try again.
180
+
The MPN ID you provided (`MPNID`) isn't valid. Provide a valid MPN ID and try again.
181
181
182
182
Most commonly caused by the wrong MPN ID being provided.
183
183
184
184
### ApplicationNotFound
185
185
186
-
The target application (`AppId`) cannot be found. Provide a valid application ID and try again.
186
+
The target application (`AppId`) can’t be found. Provide a valid application ID and try again.
187
187
188
188
Most commonly caused when verification is being performed via Graph API, and the ID of the application provided is incorrect. Note- the ID of the application must be provided, not the AppId/ClientId.
189
189
190
190
### B2CTenantNotAllowed
191
191
192
-
This capability is not supported in an Azure AD B2C tenant.
192
+
This capability isn't supported in an Azure AD B2C tenant.
193
193
194
194
### EmailVerifiedTenantNotAllowed
195
195
196
-
This capability is not supported in an email verified tenant.
196
+
This capability isn't supported in an email verified tenant.
197
197
198
198
### NoPublisherDomainOnApplication
199
199
200
200
The target application (`AppId`) must have a Publisher Domain set. Set a Publisher Domain and try again.
201
201
202
-
Occurs when a [Publisher Domain](howto-configure-publisher-domain.md)is not configured on the app.
202
+
Occurs when a [Publisher Domain](howto-configure-publisher-domain.md)isn't configured on the app.
203
203
204
204
### PublisherDomainMismatch
205
205
206
-
The target application's Publisher Domain (`publisherDomain`) does not match the domain used to perform email verification in Partner Center (`pcDomain`). Ensure these domains match and try again.
206
+
The target application's Publisher Domain (`publisherDomain`) doesn't match the domain used to perform email verification in Partner Center (`pcDomain`). Ensure these domains match and try again.
207
207
208
208
Occurs when neither the app's [Publisher Domain](howto-configure-publisher-domain.md) nor one of the [custom domains](../fundamentals/add-custom-domain.md) added to the Azure AD tenant match the domain used to perform email verification in Partner Center.
209
209
210
210
### NotAuthorizedToVerifyPublisher
211
211
212
-
You are not authorized to set the verified publisher property on application (<`AppId`)
212
+
You aren't authorized to set the verified publisher property on application (<`AppId`)
213
213
214
214
Most commonly caused by the signed-in user not being a member of the proper role for the MPN account in Azure AD- see [requirements](publisher-verification-overview.md#requirements) for a list of eligible roles and see [common issues](#common-issues) for more information.
215
215
216
216
### MPNIdWasNotProvided
217
217
218
-
The MPN ID was not provided in the request body or the request content type was not "application/json".
218
+
The MPN ID wasn't provided in the request body or the request content type wasn't "application/json".
219
219
220
220
### MSANotSupported
221
221
222
-
This feature is not supported for Microsoft consumer accounts. Only applications registered in Azure AD by an Azure AD user are supported.
222
+
This feature isn't supported for Microsoft consumer accounts. Only applications registered in Azure AD by an Azure AD user are supported.
223
223
224
224
### InteractionRequired
225
225
226
-
Occurs when multifactor authentication has not been performed before attempting to add a verified publisher to the app. See [common issues](#common-issues) for more information. Note: MFA must be performed in the same session when attempting to add a verified publisher. If MFA is enabled but not required to be performed in the session, the request will fail.
226
+
Occurs when multi-factor authentication hasn't been performed before attempting to add a verified publisher to the app. See [common issues](#common-issues) for more information. Note: MFA must be performed in the same session when attempting to add a verified publisher. If MFA is enabled but not required to be performed in the session, the request will fail.
227
227
228
-
The error message displayed will be: "Due to a configuration change made by your administrator, or because you moved to a new location, you must use multifactor authentication to proceed."
228
+
The error message displayed will be: "Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to proceed."
229
229
230
230
### UnableToAddPublisher
231
231
232
-
One of these error messages are displayed: "A verified publisher cannot be added to this application. Contact your administrator for assistance.", or "You are unable to add a verified publisher to this application. Contact your administrator for assistance."
232
+
One of these error messages are displayed: "A verified publisher can’t be added to this application. Contact your administrator for assistance.", or "You're unable to add a verified publisher to this application. Contact your administrator for assistance."
233
233
234
234
First, verify you've met the [publisher verification requirements](publisher-verification-overview.md#requirements).
235
235
236
-
When a request to add a verified publisher is made, many signals are used to make a security risk assessment. If the request is determined to be risky an error will be returned. For security reasons, Microsoft does not disclose the specific criteria used to determine whether a request is risky or not. If you received this error and believe the "risky" assessment is incorrect, try waiting and resubmitting the verification request. Some customers have reported success after multiple attempts.
236
+
When a request to add a verified publisher is made, many signals are used to make a security risk assessment. If the request is determined to be risky an error will be returned. For security reasons, Microsoft doesn't disclose the specific criteria used to determine whether a request is risky or not. If you received this error and believe the "risky" assessment is incorrect, try waiting and resubmitting the verification request. Some customers have reported success after multiple attempts.
237
237
238
238
## Next steps
239
239
240
-
If you have reviewed all of the previous information and are still receiving an error from Microsoft Graph, gather as much of the following information as possible related to the failing request and [contact Microsoft support](developer-support-help-options.md#create-an-azure-support-request).
240
+
If you've reviewed all of the previous information and are still receiving an error from Microsoft Graph, gather as much of the following information as possible related to the failing request and [contact Microsoft support](developer-support-help-options.md#create-an-azure-support-request).
0 commit comments