Domain Verification for Microsoft Account App in Azure AD for Azure B2C

LT20 1 Reputation point
2021-06-10T03:53:39.683+00:00

Hi, not sure if this belongs in tech community, here or stackoverflow for AAD.

Do I need to have a Microsoft partner account so that the B2C Login app I created for Microsoft accounts says verified or is that just for the blue tick?

Per Create a Microsoft account application Step 2 from Set up sign-up and sign-in with a Microsoft account using Azure Active Directory B2C You need to make an application in your Azure AD Tenant (not the B2C Tenant). I've done this and the tenant has a verified domain, but it still says 'unverified' when signing in with a Microsoft account. Publisher domain is set to the verified domain of the AAD Tenant.

I know that Features not applicable in Azure AD B2C tenants says publisher domain verification isn't available but:

  1. I take that as referring to the apps that B2C will be used to sign you into, not the app you need to create to allow Microsoft accounts to work with B2C
  2. The app to make Microsoft accounts work isn't in the B2C Tenant
  3. The domain is already verified

How do I get this app for B2C (that isn't in a B2C Tenant) domain verified?

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,633 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,389 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. James Hamil 21,466 Reputation points Microsoft Employee
    2021-06-21T19:42:01.25+00:00

    Hi @LT20 , sorry for the delay in response!

    You should be able to get your "federation" app registration verified if registered in your corp AAD tenant, following normal AAD procedure to get it verified. You can refer to the following docs here to get the domain verification done and domain publisher added:

    https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-configure-publisher-domain
    https://learn.microsoft.com/en-us/azure/active-directory/develop/mark-app-as-publisher-verified

    Details on Publisher verification: https://learn.microsoft.com/en-us/azure/active-directory/develop/publisher-verification-overview

    Please let me know if you have any questions!

    If this answer helped you please mark it as "Verified" so other users can reference it.

    Thank you,
    James