New Microsoft Customer Agreement (MCA) verification flow

Appxite

Introduction

This article explains the new Microsoft Customer Agreement (MCA) verification process that replaces the previous attestation method. The enhanced flow provides a more compliant API-based attestation process while maintaining support for direct customer acceptance. This change affects how Sellers and Customers complete the MCA signing process when purchasing Microsoft offers.

Important! Partners who are using the current attestation process or have customers who directly accepted the MCA will not need to reaccept those MCAs. This process applies only for customer tenants who have never signed MCA or haven't renewed indirect MCA after April 1, 2023.

Understanding the new MCA verification methods

Microsoft has introduced two compliant ways to accept the MCA:

  1. Enhanced partner attestation API - A new API-based method where partners generate an attestation link for customers
  2. Direct customer acceptance - Customers accept the agreement directly in Microsoft 365 Admin Center

The Platform implements the enhanced partner attestation API method, providing a streamlined process through the user interface.

New customer flow with Azure tenant

When a Customer attempts to purchase a Microsoft offer without a signed MCA or with indirect MCA that wasn't renewed after April 1st 2023, the Platform guides them through the following steps:

Step 1: Add offer to cart

When you attempt to add a Microsoft offer to your cart without a signed MCA, a new pop-up window appears requesting signatory information.

Complete the following fields:

  • Signatore first name - First name of the individual signing the agreement
  • Signatore last name - last name of the individual signing the agreement
  • Email address - Signatory's email address
  • Phone number - Signatory's phone number (optional)

Action: Click the Submit button to proceed.

By clicking Submit, you confirm that contact details provided are correct. The Customer will be asked to review and accept the agreement in the next step.

Step 2: Complete agreement acceptance

After submitting the signatory information, next window appears with an Action required notification.

NOTE! The attestation agreement link generated by Microsoft is valid for 7 days and will appear during order placement until the MCA has been accepted. After expiration, the MCA process must be re-launched.

To complete the MCA acceptance:

  1. Click the Open Attestation Link button
  2. You will be redirected to Microsoft's attestation page
  3. Review the Microsoft Customer Agreement terms
  4. Accept the agreement
  5. Return to the Platform - the slider will automatically close once acceptance is confirmed

The Platform periodically checks whether the agreement has been signed. Once Microsoft confirms the acceptance, the shopping cart opens automatically with your selected offer.

Step 3: Proceed with purchase

Once the MCA is accepted, you can complete your purchase through the standard checkout process.

Platform workflow

The Platform implements the following automated workflow:

  1. Check MCA status - The platform checks whether the MCA is already signed for the Customer's tenant
  2. Generate attestation - If not signed, the platform sends a request to Microsoft to create an Attestation ID
  3. Store attestation data - The Attestation ID is stored and mapped to the customer tenant for tracking
  4. Provide attestation link - The attestation agreement link is provided to the Customer
  5. Monitor acceptance - The Platform periodically checks whether the link has been accepted while the slider is open
  6. Complete MCA signing - Once attestation is accepted, the Platform sends a final request to Microsoft to complete the MCA signing for the tenant
  7. Confirm completion - The Platform confirms MCA is signed and returns a success response, displaying the shopping cart

Direct customer acceptance option

As an alternative to partner attestation, Customers can accept the Microsoft Customer Agreement directly in the Microsoft 365 Admin Center. 
 

NOTE! Only Microsoft 365 Admins can review and accept the MCA.

To use direct customer acceptance:

  1. Customer signs into Microsoft 365 Admin Center using the following URL:
    https://admin.microsoft.com/AdminPortal/Home?ref=/BillingAccounts/agreement
  2. Customer uses their sign-in credentials
  3. Customer reviews and accepts the MCA directly in the Admin Center

This option is useful when Customers prefer to review and accept agreements directly through Microsoft's interface.
When utilizing this option, ensure the Customer has access to the tenant credentials that were provided during tenant creation, typically included in the initial setup notification.

Limitations

  • Existing MCAs remain valid - Partners using the current attestation process or customers who have directly accepted the MCA do not need to reaccept. Only new customers are affected by this change.
  • Attestation link expiration - The attestation link has a limited validity period as per Microsoft logic (7 days). If the link expires before acceptance, the process must be restarted.
  • No retroactive changes - The new process only applies to new MCA acceptances going forward

Summary

The new Microsoft Customer Agreement verification flow introduces an enhanced attestation API that provides a more compliant and streamlined process for MCA acceptance. The platform automatically handles the technical implementation while providing a simple user experience through guided sliders. Customers can either complete attestation through the platform-generated link or accept the MCA directly in Microsoft 365 Admin Center. Existing MCAs remain valid and do not require reacceptance. This process applies only for customer tenants who have never signed MCA or haven't renewed indirect MCA after April 1, 2023.

Was this article helpful?

0 out of 0 found this helpful

Add comment

Please sign in to leave a comment.