Question

Your company develops a multi-tenant application registered in Entra ID that customers install via user consent. Customers report that the consent prompt shows an 'unverified' warning, and your security team wants the app to display a verified publisher badge to increase trust and comply with a customer's app consent policy that only permits verified publisher apps. What must you do to have the app show as publisher verified?

Accepted Answer

Associate the app registration with a Microsoft Partner Network (MPN) account that has completed the verification process, then set the app's publisher domain and mark it publisher verified.

Answer

Configure a verified publisher domain by adding a DNS TXT record to the domain listed in the app's redirect URIs.

Answer

Enable multifactor authentication for all users who consent to the application so the consent prompt trusts the publisher.

Answer

Grant the application admin-consented Microsoft Graph permissions so it no longer requires user consent.