Getting a Microsoft Partner ID
Goal: Have the Partner ID that the Publisher tab in App Identity asks for, and know what Microsoft checks when you press Verify.
When someone is asked to consent to an application, Microsoft shows whether its publisher is verified. A verified publisher has a blue verified badge on the consent screen. OpenX creates applications in your Microsoft directory, for example the OpenX Mail application and your workspace's sign-in app. The Publisher tab in App Identity lists them, and with your Partner ID it asks Microsoft to show your organization as their verified publisher.
What a Partner ID is
A Partner ID is the number Microsoft gives an organization in the Microsoft AI Cloud Partner Program (formerly the Microsoft Partner Network, so older pages call it an MPN ID). It is digits only. Microsoft does not publish a fixed length; its own examples have seven and eight digits.
Joining the program and verifying a publisher cost nothing, and no license is needed.
Get one
- Enroll your organization in the Microsoft AI Cloud Partner Program in Partner Center.
- Finish Microsoft's verification of your organization. Until it is finished, Microsoft refuses the Partner ID for publisher verification.
- In Partner Center, open Settings (the gear), then Account settings, then Identifiers, and look on the Microsoft AI Cloud Partner Program tab. Use the Partner ID whose type is PartnerGlobal: your organization's global account. A location's Partner ID is not accepted.
If Identifiers is empty, enrollment has not finished yet.
What Microsoft checks when you press Verify
| Check | What it needs |
|---|---|
| Your organization is verified | The Partner ID belongs to a partner global account that has finished Microsoft's verification |
| Your directory is linked | The Microsoft directory the application is in is associated with that partner account. If it is not the account's primary directory, add it to the account in Partner Center first |
| Your roles | The person who presses Verify is an Application Administrator or a Cloud Application Administrator in the directory, and a Partner Admin or an Accounts Admin in Partner Center |
| Multifactor sign-in | That person signed in to Microsoft with multifactor authentication |
| The publisher domain | The application has a publisher domain, and the email domain used to verify your partner account matches it or is a verified custom domain of the directory. A domain ending in onmicrosoft.com is not accepted |
| The kind of directory | Microsoft does not verify publishers in Azure AD B2C directories, so the tab offers no Verify there |
Microsoft also asks your organization, as the publisher, to accept its terms of use for developers on the Microsoft identity platform.
What OpenX does with it
- The Partner ID field is in the Publisher tab only while the window is open. OpenX never saves it to your workspace.
- OpenX finds each application by the tag it put on it or the id it recorded when it created it, never by its name.
- After Verify, OpenX reads the application back from Microsoft and shows Verified only when Microsoft says so. Microsoft can take a few minutes to show the badge to people asked to consent.
- Undo takes the verified publisher off one application.
When you are not an administrator
If Microsoft says you may not verify the publisher, the row offers to send the step to an administrator: Email it, Copy it, and I've sent it. The text names the application, your Partner ID if you typed one, and where to do it in Microsoft Entra: App registrations, the application, Branding & properties, then Add Partner ID to verify publisher.
Next steps
- The tab itself -> App Identity
- The order things unlock in -> Environment