User from associated tenant cannot complete Microsoft Entra App Publisher Verification with verified PartnerGlobal ID

Question

Background:

I have an active Azure Developer Support Plan and was directed here through Azure Portal Priority Community Support.

We are trying to complete Microsoft Entra App Publisher Verification for an app registration in an associated Microsoft Entra tenant.

Setup:

• Partner Center / Microsoft AI Cloud Partner Program verification is completed.
• We are using the PartnerGlobal / PGA Partner One ID, not a location Partner ID.

PII

• Tenant A is the primary Microsoft Entra tenant of the verified Partner Center / PGA account.
• Tenant B is an associated Microsoft Entra tenant under the same verified Partner Center / PGA account.

PII

• The app registration is in associated tenant B.
• The app in associated tenant B has a verified custom publisher domain (which is eventx.io, the same as the verified email domain during partner verification), not an onmicrosoft.com domain.

PII

• Publisher domain is the same as one of the custom domain names attached to the tenant B

PII

• The user (email: ******@eventx.io) initiating Publisher Verification is a user from associated tenant B.
• This associated-tenant-B user (email: ******@eventx.io) is Global Administrator & has permission to manage the app registration in tenant B.

• MFA is enabled and used during sign-in.

Problem:

When the user from associated tenant B tries to verify the publisher by adding the verified PartnerGlobal / PGA Partner One ID to the app registration in associated tenant B, the Publisher Verification cannot be completed.PII

Details:

PII

I have an active Azure Developer Support Plan and was directed here through Azure Portal Priority Community Support.

We are trying to complete Microsoft Entra App Publisher Verification for an app registration in an associated Microsoft Entra tenant.

Setup:

• Partner Center / Microsoft AI Cloud Partner Program verification is completed.
• We are using the PartnerGlobal / PGA Partner One ID, not a location Partner ID.
• PII
• Tenant A is the primary Microsoft Entra tenant of the verified Partner Center / PGA account.
• Tenant B is an associated Microsoft Entra tenant under the same verified Partner Center / PGA account.

PII

• The app registration is in associated tenant B.
• The app in associated tenant B has a verified custom publisher domain (which is eventx.io, the same as the verified email domain during partner verification), not an onmicrosoft.com domain.

PII

• Publisher domain is the same as one of the custom domain names attached to the tenant B
• PII
• The user (email: ******@eventx.io) initiating Publisher Verification is a user from associated tenant B.
• This associated-tenant-B user (email: ******@eventx.io) is Global Administrator & has permission to manage the app registration in tenant B.

• MFA is enabled and used during sign-in.

Problem:

When the user from associated tenant B tries to verify the publisher by adding the verified PartnerGlobal / PGA Partner One ID to the app registration in associated tenant B, the Publisher Verification cannot be completed.

PII

Details:

PII

Answer 1

Hello Isaac Wong

Publisher Verification is tied to the Microsoft Entra tenant that is linked with the verified PartnerGlobal (PGA) ID. In this case, that is Tenant A.

Hence by design, Even if the user has Global Administrator access or the app is set up correctly there, Tenant B (the linked tenant) is unable to complete Publisher Verification.

Therefore, Publisher Verification must be completed in Tenant A (PGA-linked tenant). Once done the application can be used in Tenant B via a multi-tenant setup or, if necessary, the proper consent setting after it has been verified there.

Hello Isaac Wong If the resolution was helpful, kindly take a moment to click on and click on Yes for was this answer helpful. And, if you have any further query do let us know.