Notification Hub - Can't add WNS service - Invalid WNS credentials

Question

Notification Hub - Can't add WNS service - Invalid WNS credentials

comor 30

https://learn.microsoft.com/en-us/azure/notification-hubs/create-notification-hub-portal.

I need to push a WNS to my UWP app, and follow the guide above like belows.

First, add a new App on Store, get the SID. User's image

Second, go to Azure and find the App, User's image

Then, click in,add a key/secret, and get the secret value. User's image

At last, new a Notification Hub, and fill the SID and secret value to WNS item User's image

Save, and error happens.

User's image

I tried many time, including register a new app within azure, but it has no SID, still fail too.

So, which step is wrong?

comor 30 Reputation points

2025-04-30T11:09:02.9366667+00:00

additonal guide ref: https://learn.microsoft.com/en-us/azure/notification-hubs/notification-hubs-windows-store-dotnet-get-started-wns-push-notification
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-04-30T12:30:35.21+00:00

Hi comor,
The notification hub requires a Package SID and Security Key from your app registration at the Microsoft Partner Center. These values correspond with the configured in the Azure notification hub. If they do not match or are old, you will get "invalid WNS credentials" error.

With your screenshot, I can confirm:

The Package SID and security key were drawn from the partner center.

The values used in the possibility of Azure notification hub do not match, or credentials were not properly updated.

Please follow these steps to solve the problem:

Log in to the Microsoft Partner Center.

Apps and Games> Go to your app> App identity.

Note the following:

Package SID

Client Secret / Security Key

Next, open the Azure portal and navigate your notification hub.

Under Windows Settings:

Paste the correct Package SID

Paste this Security Key

Click Save.

This credential should solve mismatched mismatch and enable push notifications again.
https://learn.microsoft.com/en-us/azure/notification-hubs/configure-windows-push-notification-service
https://learn.microsoft.com/en-us/azure/notification-hubs/notification-hubs-windows-store-dotnet-get-started-wns-push-notification#create-an-app-in-windows-store
https://learn.microsoft.com/en-us/azure/notification-hubs/notification-hubs-push-notification-registration-management#configure-wns
if you have any further concerns or queries, please feel free to reach out to us.
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-05-02T09:47:49.64+00:00

Hi comor,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-05-05T09:39:30.53+00:00

Hi comor,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
comor 30 Reputation points

2025-05-06T01:17:59.1766667+00:00

Thanks for the reply!

But as I can see, no Client Secret / Security Key found on Partner Center. So I assume the secret/key must come frome Azure Portal.

The docs you supplied also were read, it is not fit the latest Partner Center or Azure Portal, which make me very confuse.

And although not have a single successful WNS notificaiton, I have spent ￥3500 on this Notification Hub....
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-05-07T12:23:25.44+00:00

Hi comor,
Apology for your Inconveniences. We noticed your recent experience on the Q&A community platform was rated low (Answer provided was not helpful). Thank you for taking time to share your feedback.

Here few suggestions for your query may help you:

While the package SID is obtained correctly from the partner center under the App Identification, the Azure notification hub has not been shown in the Hub, the customer in the secret / safety key partner center required to configure the WNS (Windows notification service). It is expected - the safety key must be generated separately.
You can go to Azure portal: Azure Active Directory > App registrations, register your app
https://apps.dev.microsoft.com/

Match it with the identity of your app (using the same package SID) in the partner center.

Under "Certificate and Raj", click on "New Customer Secret".

This mystery will serve as WNS safety key.

Under authentication, verify that the platform includes "mobile or desktop applications" and valid redirected URIs.
After this process you can paste Package SID (from Partner Center). and Paste the Client Secret (from the App Registration portal). in Notification Hub and then click on save.
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-05-08T19:55:35.6+00:00

Hi comor, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-05-09T17:57:37.14+00:00

Hi comor, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
comor 30 Reputation points

2025-05-11T07:35:42.32+00:00

I'm not sure if you are a maintenance staff of Azure, or if you have recently operated or tested this kind of application. If possible, please try to operate it by yourself first and make sure it succeeds before answering this question. Otherwise, it may waste each other's time.
Sampath 3,250 Reputation points Microsoft External Staff Moderator

2025-05-13T12:28:01.82+00:00

Hi comor, Sorry for the inconvenience. We are experiencing access-related issues on our end. We will get back to you on this.
comor 30 Reputation points

2025-05-14T10:30:07.1266667+00:00

Thank you for your patient reply. I believe that many developers who develop such WNS Apps will encounter this kind of problem. If there is any latest progress, please reply here or send a message or an email. I would be extremely grateful.
Sampath 3,250 Reputation points Microsoft External Staff Moderator

2025-05-14T11:38:10.19+00:00

Hi comor,sure
Microlead Software 1 Reputation point

2025-05-18T16:19:06.6366667+00:00

I have the same issue (Invalid WNS credentials.), i followed Microsoft documentation till Step 4 which is mapping the App PFN to its Azure AppId by sending a map request to Win_App_SDK_Push@microsoft.com, but the email always fail (undelivered).
i think #comor has the same situation, need to map the App PFN to its Azure AppId for the credentials to be valid.

Is there an alternative for sending an email to Win_App_SDK_Push@microsoft.com? i don't know why Microsoft still use manual mapping not automatic mapping like adding a section to the Azure registered app to map the Partner Center App PFN to its Azure AppId?
Sampath 3,250 Reputation points Microsoft External Staff Moderator

2025-05-19T10:23:45.2733333+00:00

Hello @Microlead Software ,Sorry for the inconvenience. We are experiencing access-related issues on our end. We will get back to you on this.
Microlead Software 1 Reputation point

2025-05-19T14:26:49.77+00:00

Thanks for the update @Sampath . I'll wait for your follow-up, as the PFN-to-Azure AppId mapping is a blocking issue for enabling WNS in production. Please let us know once the email channel is working or if there’s an alternative procedure we can use in the meantime.

If there's any workaround or manual intervention possible in the interim, I’d be very grateful, we’re currently unable to proceed with push notifications due to the WNS authentication failure.
Microlead Software 1 Reputation point

2025-05-19T14:41:21.2933333+00:00

Hi @Sampath ,
For reference, here’s the full error returned when trying to email Win_App_SDK_Push@microsoft.com:

CY4PEPF0000E9D6.mail.protection.outlook.com rejected your message to the following email addresses:

Win_App_SDK_Push@microsoft.com (Win_App_SDK_Push@microsoft.com)

Your message was rejected by the recipient's domain because the recipient's email address isn't listed in the domain's directory. It might be misspelled or it might not exist. Try to fix the problem by doing one or more of the following:

Send the message again - delete and retype the address before resending. If your email program automatically suggests an address to use, don't select it - type the complete email address.

Clear the recipient Auto-Complete List in your email program by following the steps in this article. Then resend the message.

For Email Administrators

Directory based edge blocking is enabled for the recipient's organization and the recipient wasn't found in their directory. If the sender is using the correct address but continues to experience the problem, contact the recipient's email admin and tell them about the problem. To fix this they should resynchronize their on-premises and cloud directories.

CY4PEPF0000E9D6.mail.protection.outlook.com gave this error:

Recipient address rejected: Access denied. For more information see https://aka.ms/EXOSmtpErrors [CY4PEPF0000E9D6.namprd05.prod.outlook.com 2025-05-18T03:56:02.207Z 08DD948BBACB413A]

Your answer

comor 30 Reputation points

2025-04-30T11:09:02.9366667+00:00

additonal guide ref: https://learn.microsoft.com/en-us/azure/notification-hubs/notification-hubs-windows-store-dotnet-get-started-wns-push-notification
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-04-30T12:30:35.21+00:00

Hi comor,
The notification hub requires a Package SID and Security Key from your app registration at the Microsoft Partner Center. These values correspond with the configured in the Azure notification hub. If they do not match or are old, you will get "invalid WNS credentials" error.

With your screenshot, I can confirm:

The Package SID and security key were drawn from the partner center.

The values used in the possibility of Azure notification hub do not match, or credentials were not properly updated.

Please follow these steps to solve the problem:

Log in to the Microsoft Partner Center.

Apps and Games> Go to your app> App identity.

Note the following:

Package SID

Client Secret / Security Key

Next, open the Azure portal and navigate your notification hub.

Under Windows Settings:

Paste the correct Package SID

Paste this Security Key

Click Save.

This credential should solve mismatched mismatch and enable push notifications again.
https://learn.microsoft.com/en-us/azure/notification-hubs/configure-windows-push-notification-service
https://learn.microsoft.com/en-us/azure/notification-hubs/notification-hubs-windows-store-dotnet-get-started-wns-push-notification#create-an-app-in-windows-store
https://learn.microsoft.com/en-us/azure/notification-hubs/notification-hubs-push-notification-registration-management#configure-wns
if you have any further concerns or queries, please feel free to reach out to us.
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-05-02T09:47:49.64+00:00

Hi comor,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-05-05T09:39:30.53+00:00

Hi comor,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
comor 30 Reputation points

2025-05-06T01:17:59.1766667+00:00

Thanks for the reply!

But as I can see, no Client Secret / Security Key found on Partner Center. So I assume the secret/key must come frome Azure Portal.

The docs you supplied also were read, it is not fit the latest Partner Center or Azure Portal, which make me very confuse.

And although not have a single successful WNS notificaiton, I have spent ￥3500 on this Notification Hub....
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-05-07T12:23:25.44+00:00

Hi comor,
Apology for your Inconveniences. We noticed your recent experience on the Q&A community platform was rated low (Answer provided was not helpful). Thank you for taking time to share your feedback.

Here few suggestions for your query may help you:

While the package SID is obtained correctly from the partner center under the App Identification, the Azure notification hub has not been shown in the Hub, the customer in the secret / safety key partner center required to configure the WNS (Windows notification service). It is expected - the safety key must be generated separately.
You can go to Azure portal: Azure Active Directory > App registrations, register your app
https://apps.dev.microsoft.com/

Match it with the identity of your app (using the same package SID) in the partner center.

Under "Certificate and Raj", click on "New Customer Secret".

This mystery will serve as WNS safety key.

Under authentication, verify that the platform includes "mobile or desktop applications" and valid redirected URIs.
After this process you can paste Package SID (from Partner Center). and Paste the Client Secret (from the App Registration portal). in Notification Hub and then click on save.
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-05-08T19:55:35.6+00:00

Hi comor, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Alekhya Vaddepally 1,340 Reputation points Microsoft External Staff Moderator

2025-05-09T17:57:37.14+00:00

Hi comor, We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution, please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
comor 30 Reputation points

2025-05-11T07:35:42.32+00:00

I'm not sure if you are a maintenance staff of Azure, or if you have recently operated or tested this kind of application. If possible, please try to operate it by yourself first and make sure it succeeds before answering this question. Otherwise, it may waste each other's time.
Sampath 3,250 Reputation points Microsoft External Staff Moderator

2025-05-13T12:28:01.82+00:00

Hi comor, Sorry for the inconvenience. We are experiencing access-related issues on our end. We will get back to you on this.
comor 30 Reputation points

2025-05-14T10:30:07.1266667+00:00

Thank you for your patient reply. I believe that many developers who develop such WNS Apps will encounter this kind of problem. If there is any latest progress, please reply here or send a message or an email. I would be extremely grateful.
Sampath 3,250 Reputation points Microsoft External Staff Moderator

2025-05-14T11:38:10.19+00:00

Hi comor,sure
Microlead Software 1 Reputation point

2025-05-18T16:19:06.6366667+00:00

I have the same issue (Invalid WNS credentials.), i followed Microsoft documentation till Step 4 which is mapping the App PFN to its Azure AppId by sending a map request to Win_App_SDK_Push@microsoft.com, but the email always fail (undelivered).
i think #comor has the same situation, need to map the App PFN to its Azure AppId for the credentials to be valid.

Is there an alternative for sending an email to Win_App_SDK_Push@microsoft.com? i don't know why Microsoft still use manual mapping not automatic mapping like adding a section to the Azure registered app to map the Partner Center App PFN to its Azure AppId?
Sampath 3,250 Reputation points Microsoft External Staff Moderator

2025-05-19T10:23:45.2733333+00:00

Hello @Microlead Software ,Sorry for the inconvenience. We are experiencing access-related issues on our end. We will get back to you on this.
Microlead Software 1 Reputation point

2025-05-19T14:26:49.77+00:00

Thanks for the update @Sampath . I'll wait for your follow-up, as the PFN-to-Azure AppId mapping is a blocking issue for enabling WNS in production. Please let us know once the email channel is working or if there’s an alternative procedure we can use in the meantime.

If there's any workaround or manual intervention possible in the interim, I’d be very grateful, we’re currently unable to proceed with push notifications due to the WNS authentication failure.
Microlead Software 1 Reputation point

2025-05-19T14:41:21.2933333+00:00

Hi @Sampath ,
For reference, here’s the full error returned when trying to email Win_App_SDK_Push@microsoft.com:

CY4PEPF0000E9D6.mail.protection.outlook.com rejected your message to the following email addresses:

Win_App_SDK_Push@microsoft.com (Win_App_SDK_Push@microsoft.com)

Your message was rejected by the recipient's domain because the recipient's email address isn't listed in the domain's directory. It might be misspelled or it might not exist. Try to fix the problem by doing one or more of the following:

Send the message again - delete and retype the address before resending. If your email program automatically suggests an address to use, don't select it - type the complete email address.

Clear the recipient Auto-Complete List in your email program by following the steps in this article. Then resend the message.

For Email Administrators

Directory based edge blocking is enabled for the recipient's organization and the recipient wasn't found in their directory. If the sender is using the correct address but continues to experience the problem, contact the recipient's email admin and tell them about the problem. To fix this they should resynchronize their on-premises and cloud directories.

CY4PEPF0000E9D6.mail.protection.outlook.com gave this error:

Recipient address rejected: Access denied. For more information see https://aka.ms/EXOSmtpErrors [CY4PEPF0000E9D6.namprd05.prod.outlook.com 2025-05-18T03:56:02.207Z 08DD948BBACB413A]

Share via

Notification Hub - Can't add WNS service - Invalid WNS credentials

Your answer