Skip to content

Commit 82be899

Browse files
committed
updates
1 parent 7deec11 commit 82be899

File tree

2 files changed

+9
-45
lines changed

2 files changed

+9
-45
lines changed
51.6 KB
Loading

articles/active-directory/develop/publisher-verification-overview.md

Lines changed: 9 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -16,15 +16,18 @@ ms.reviewer: jesakowi
1616

1717
# Publisher verification
1818

19-
Publisher verification allows developers to add a verified organizational identity to apps registered through Azure Active Directory (AAD). Verification is done by associating one or more apps with a Microsoft Partner Center (MPN) account.
19+
Publisher verification (preview) helps admins and end users understand the authenticity of application developers integrating with the Microsoft identity platform. In other words, is the publisher a known source or a bad actor disguising themselves as a well-known publisher? When an application is marked as publisher verified, it means that the publisher has verified their identity using their Microsoft Partner Network (MPN) account and has associated this MPN account with their application registration.
2020

21-
This feature is primarily targeted at developers building multi-tenant apps that leverage [OAuth 2.0 and OpenID Connect](active-directory-v2-protocols.md) with the [Microsoft identity platform](v2-overview.md). These apps can sign users in using OpenID Connect, or they may use OAuth to request access to data using APIs like [Microsoft Graph](https://developer.microsoft.com/graph/).
21+
A blue "verified" badge appears on the Azure AD consent prompt and other screens:
22+
![Consent prompt][./media/publisher-verification-overview/consent-prompt.png]
23+
24+
This feature is primarily for developers building multi-tenant apps that leverage [OAuth 2.0 and OpenID Connect](active-directory-v2-protocols.md) with the [Microsoft identity platform](v2-overview.md). These apps can sign users in using OpenID Connect, or they may use OAuth to request access to data using APIs like [Microsoft Graph](https://developer.microsoft.com/graph/).
2225

2326
## Benefits
2427
Publisher verification provides the following benefits:
2528
- **Increased transparency and risk reduction for customers**- this capability helps customers understand which apps being used in their organizations are published by developers they trust.
2629

27-
- **Improved branding**- a “verified” badge appears on the Azure AD [consent prompt](application-consent-experience.md), Enterprise Apps page, and additional UX surfaces used by end-users and admins.
30+
- **Improved branding**- a “verified” badge appears on the Azure AD [consent prompt](application-consent-experience.md), Enterprise Apps page, and additional UX surfaces used by end users and admins.
2831

2932
- **Smoother enterprise adoption**- admins can configure new User Consent Policies, and publisher verification status will be one of the primary policy criteria.
3033

@@ -45,12 +48,12 @@ There are a few pre-requisites for publisher verification, some of which will ha
4548

4649
1. In Partner Center this user must have of the following [roles](/partner-center/permissions-overview): MPN Admin, Accounts Admin, or a Global Admin (this is a shared role mastered in Azure AD).
4750

48-
Developers who have already met these pre-requisites can get verified in a matter of minutes. If the requiremets have not been met, getting set up is free.
49-
50-
If you cannot currently meet these requirements, or don’t know if you can, you can still participate in the private preview! We want to hear your feedback and help you understand how you can satisfy these requirements.
51+
Developers who have already met these pre-requisites can get verified in a matter of minutes. If the requirements have not been met, getting set up is free.
5152

5253
## Frequently Asked Questions
5354

55+
- **What information does Publisher Verification not provide?** When an application is marked publisher verified this does not indicate whether the application or its publisher has achieved any specific certifications, complies with industry standards, adheres to best practices, etc. Other Microsoft programs do provide this information, including [Microsoft 365 App Certification](/microsoft-365-app-certification/overview).
56+
5457
- **When will the verified badge start showing up on the consent screen?** Users who get prompted to consent to your app see the badge soon after you've gone through the process successfully, although it may take some time for this to replicate throughout the system. This will generally be a few minutes but could be a few hours.
5558

5659
- **When will other experiences start showing the badge or using verification status?**
@@ -89,45 +92,6 @@ If you cannot currently meet these requirements, or don’t know if you can, you
8992

9093
- **Is this the same thing as the Azure AD Application Gallery?** No- publisher verification is a complementary but separate feature to the [Azure Active Directory application gallery](/azure/active-directory/azuread-dev/howto-app-gallery-listing). You will need to complete the publisher verification process independently of participation in that program.
9194

92-
93-
94-
95-
**What information does publisher verification provide to customers?**
96-
97-
The primary goal of publisher verification (Preview) is to help admins and end users better understand the authenticity of application developers integrating with the Microsoft identity platform. In other words, is the publisher a known source or a bad actor disguising themselves as a well-known publisher? When an application is marked as publisher verified, it means that the publisher has verified their identity using their Microsoft Partner Network (MPN) account and has associated this MPN account with their application registration.
98-
99-
**What information does Publisher Verification not provide?**
100-
101-
When an application is marked publisher verified this does not indicate whether the application or its publisher has achieved any specific certifications, complies with industry standards, adheres to best practices, etc. Other Microsoft programs do provide this information, including [Microsoft 365 App Certification](/microsoft-365-app-certification/overview).
102-
103-
**How does a publisher obtain a verified publisher status?**
104-
105-
Publisher verification is performed on an application-by- application basis so a publisher must verify each application where they would like a publisher verification badge to appear.
106-
107-
The following requirements must be met for a publisher to mark an app as publisher verified:
108-
109-
1. The publisher must have a valid [Microsoft Partner Network account](https://partner.microsoft.com/membership).
110-
111-
1. This account must have completed the [MPN account verification](/partner-center/verification-responses) process.
112-
113-
1. This account must be the partner global account (PGA) for the publisher’s organization.
114-
115-
1. The app must be registered in an Azure Active Directory tenant.
116-
117-
1. A [publisher domain](/azure/active-directory/develop/howto-configure-publisher-domain) must be set on the application.
118-
119-
1. The domain used for email verification in the partner’s MPN account must match either:
120-
121-
1. A DNS-verified [custom domain](/azure/active-directory/fundamentals/add-custom-domain) in the tenant where the app is registered
122-
123-
1. The app publisher domain from #5
124-
125-
1. The user performing verification must be authorized to make changes to both the app registration in Azure AD and the MPN account in Partner Center.
126-
127-
1. In Azure AD this user must either be the owner of the app or have one of the following [roles](/azure/active-directory/users-groups-roles/directory-assign-admin-roles): application admin, cloud application admin, global admin.
128-
129-
1. In Partner Center this user must have one of the following [roles](/partner-center/permissions-overview): MPN admin, accounts admin, or a global admin (a shared role mastered in Azure AD).
130-
13195
## Additional resources
13296
Microsoft identity platform & Azure AD
13397

0 commit comments

Comments
 (0)