Can an individual developer without a registered business obtain Microsoft Entra OAuth publisher verification?

Amjad Badr 0 Reputation points
2026-10-17T04:55:49.45+00:00

I would like clarification of the general eligibility rules for Microsoft Entra OAuth publisher verification.

The published requirements refer to a verified Microsoft AI Cloud Partner Program account and a Partner Global Account for the developer's organization. It is not clear whether there is a supported route for an independent individual developer who has no registered company or registered sole proprietorship.

Could the Microsoft Entra team clarify:

  1. Can such an individual obtain publisher verification in their own legal name, while retaining independent personal ownership of their software?
  2. If yes, what enrollment route and documents are accepted? Can identity and domain-ownership evidence be used instead of business-registration documents?
  3. Can a Microsoft Store Individual developer account satisfy the requirement, or is a verified organizational Partner Global Account mandatory?
  4. If there is no individual route, is there another supported verification option? In general, can an unverified publisher still support personal Microsoft accounts and work/school accounts, subject to tenant consent policies and administrator approval?
  5. Is there a free private support channel for an authoritative eligibility decision if the portal requires a paid technical support plan?

I am asking about the general policy, not about a particular application. Please point to the applicable official policy or provide clarification from the responsible Microsoft team.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-10-17T04:56:52.2266667+00:00

    Under the currently documented policy, an individual with no legally registered business cannot complete Microsoft Entra publisher verification solely in their personal legal name: it requires a verified Microsoft AI Cloud Partner Program account and the organization’s Partner Global Account (PGA).

    Eligibility and accepted evidence

    Microsoft’s requirements are organizational:

    • A valid Microsoft AI Cloud Partner Program account must have completed verification.
    • Its Partner One ID must be the PGA for the developer’s organization; a location Partner ID is not accepted.
    • The app must be registered using a Microsoft Entra work or school account, not a personal Microsoft account.
    • The app’s tenant must be associated with the PGA.
    • A publisher domain must be configured, and the Partner Center verification email domain must match either that publisher domain or another DNS-verified custom domain in the tenant.
    • The initiating user needs the specified Entra and Partner Center roles and must use multifactor authentication. ^1^

    Partner Center verification confirms that the business is legally registered and active at its stated address. Identity verification and domain/employment verification are separate checks from business verification; they do not replace proof of legal business registration. Accepted business evidence includes formation documents, a business license, registration, or another certificate containing the relevant business details. ^2^

    Therefore:

    • There is no documented enrollment route based only on a government ID plus domain ownership.
    • To qualify while retaining personal ownership of the software, the practical documented route would be to establish a legal business form available in the developer’s jurisdiction, enroll that entity in the Microsoft AI Cloud Partner Program, pass verification, and use its PGA. Whether the software remains personally owned is a legal/IP arrangement outside the publisher-verification rules.
    • Enrollment requires a work account, authority to accept the agreement for the organization, and the ability to produce legal documents during verification. ^3^

    Publisher verification itself has no Microsoft charge or license requirement, although satisfying the organizational prerequisites may have external costs. ^1^

    Microsoft Store Individual accounts

    A Microsoft Store Individual developer account does not satisfy these Entra publisher-verification requirements.

    Store Individual accounts are a separate onboarding type intended for personal or noncommercial Store publishing. They use a personal Microsoft account and identity verification. By contrast, Entra publisher verification explicitly rejects apps registered using a personal Microsoft account and requires a verified organizational PGA. ^4^ ^1^

    The fact that Partner Center can display an account type of Company or Individual does not make both types eligible for every Partner Center program. Each program has its own requirements.

    Operating without publisher verification

    Publisher verification is not a prerequisite for registering an OAuth/OIDC app or selecting its sign-in audience. An app can be configured for:

    • Any Microsoft Entra organization; or
    • Any Microsoft Entra organization plus personal Microsoft accounts. ^5^

    In Microsoft Entra admin center → App registrations → your app → Manifest, the corresponding signInAudience values are:

    • AzureADMultipleOrgs
    • AzureADandPersonalMicrosoftAccount ^6^

    An unverified app can therefore technically support both personal and work/school accounts. For organizational tenants, actual consent depends on each tenant’s policies and the requested permissions:

    • Non-admin users can consent only when the tenant allows that app and those permissions.
    • Administrators can restrict user consent to verified publishers.
    • Newly registered, unverified multitenant apps requesting nonbasic permissions can trigger risk-based step-up and require administrator consent.
    • If enabled, the admin-consent workflow lets users request approval. ^7^ ^8^

    There is no documented alternative program that grants the blue verified publisher badge without satisfying the Partner Program/PGA requirements. A DNS-verified publisher domain is still useful because it shows control of the displayed domain, but it is not equivalent to publisher verification. ^9^

    Getting an authoritative eligibility decision

    For an account-specific enrollment determination, use Partner Center → Help (?) → Contact Support. Partner Center documentation identifies that route for questions not covered by policy documentation. ^10^

    The available documentation does not explicitly promise a free, private Entra publisher-verification eligibility channel for someone who cannot establish a Partner Center workspace. Microsoft Q&A is public and cannot issue a binding account-vetting decision. If enrollment can be started, monitor or challenge the determination through Partner Center → Account settings → Legal info → Verification Summary, where additional evidence or an appeal can be submitted when offered. ^2^


    References

    1. Publisher verification
    2. Understand the verification process in Partner Center
    3. Enrolling in the first partner program
    4. Steps to open a developer account
    5. Supported account types
    6. Validation differences by supported account types (signInAudience)
    7. Overview of user and admin consent
    8. Configure risk-based step-up consent using PowerShell
    9. Establish applications in the Microsoft Entra ID ecosystem
    10. Common questions for the Microsoft Publisher Agreement
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.