"Add MPN ID to verify publisher" option missing for a registered app in b2c tenant

Question

We are trying to verify a published application in our Azure b2c tenant. To note that we already have 1 other verified app that was done a couple of years ago in this same b2c tenant. We followed https://learn.microsoft.com/en-us/azure/active-directory/develop/publisher-verification-overview and https://learn.microsoft.com/en-us/azure/active-directory/develop/mark-app-as-publisher-verified but we are not seeing the option "Add MPN ID to verify publisher" as it is missing.

The publisher domain is a custom domain that is verified. We used the same domain name to verify the previous app but curiously it was missing from the drop down list and custom domain name list when we tried to do this new app, so had to go through and add it back and do the TXT record dns verification for that first too. This was completed yesterday and we then set this apps Publisher domain to be this custom domain and saved the settings. After 24 hours we still do not see the "Add MPN ID to verify publisher" which is the 6th step in the mark your app as publisher verified section.

A couple more differences to note is that we do have 2 tenants added to our partner center, and the partner center Verification status shows "Authorized".

The account I am attempting to verify this app through is a global administrator, and also has all roles added on the partner center (even though its a global admin we have manually ticked all the other required options here, waited an hour then signed out/back in and retried).

Answer 1

Hello @Joel Stockley

Thank you for posting this concern on this community space.

I have read your case scenario description and I wonder if the steps stated previously are the ones below:

https://learn.microsoft.com/en-us/azure/active-directory/develop/mark-app-as-publisher-verified

Looking forward to your feedback,

Cheers,

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hi @Joel Stockley ,

Apologies for the delayed response and for missing the fact that you are using an Azure AD B2C tenant, which has a different process. The option is missing because Azure AD B2C tenants aren't associated in the same way as regular Azure AD tenants. In Azure AD B2C, the MPN ID cannot be set by a user interface in the Azure Portal and you instead need to use Graph Explorer to set it. (Reference: B2C: Verify the application's publisher domain)

Example from Set Verified Publisher:

POST /applications/appObjectId/setVerifiedPublisher 


{ 


    "verifiedPublisherId": "12345678" 


} 

The appObjectId in this case is the object id of your Azure AD B2C app (not the app id). And the VerifiedPublisherID is the MPN Id that you wish to set.

Additional references:

Set verified publisher

Set app as verified publisher in Azure AD B2C so that it shows up as verified

How to mark an Azure AD B2C app as publisher verified

Let me know if this helps and if you have further questions.

-

If the information helped you, please Accept the answer. This will help us as well as others in the community who might be researching similar question.

Answer 3

You can't verify the publisher of an app in Azure AD B2C tenant.

https://learn.microsoft.com/en-us/entra/identity-platform/publisher-verification-overview#:~:text=The%20app%20must%20be%20registered%20in%20a%20Microsoft%20Entra%20tenant%20and%20have%20a%20publisher%20domain%20set.%20The%20feature%20is%20not%20supported%20in%20Azure%20AD%20B2C%20tenant.