An Azure service that enables hosting Domain Name System (DNS) domains in Azure.
hi Devesh Tiwari & thx for sharing urs issue here at Q&A portal,
If the file is public and looks correct, I’d check the exact app/domain relationship next.
For Publisher Verification, the applicationId in microsoft-identity-association.json has to match the Application/client ID of the app registration being verified, not the object ID and not another app in the tenant. Easy thing to miss.
The file should be reachable exactly here https://avistais.com/.well-known/microsoft-identity-association.json
& MS doc https://learn.microsoft.com/en-us/entra/identity-platform/howto-configure-publisher-domain
A few things that can still break validation even when browser/curl works
applicationId mismatch
redirect before the JSON is served
WAF/CDN blocking Microsoft validation user agent/IPs
wrong content-type or extra HTML wrapper from hosting
cert chain issue from Microsoft’s validator path
apex domain vs subdomain mismatch
stale publisher/domain state in Partner Center or Entra backend
I’d test with
curl -I https://avistais.com/.well-known/microsoft-identity-association.json
curl -L https://avistais.com/.well-known/microsoft-identity-association.json
Make sure there’s no 301/302 chain to another host, no auth/cookie challenge, no bot protection page, and the final body is raw JSON only. Since Partner Center already shows the domain verified, this may be a Publisher Verification backend sync issue between Partner Center/MPN and Entra app registration. Best move is open a Microsoft Entra ID / App registrations support case w/ tenant ID, app/client ID, publisher domain, Partner Center verification proof, the validation URL, and UTC timestamps of failed attempts. Ask them to check backend publisher-domain validation logs for that app. The portal doesn’t expose those logs, unfortunately.
rgds,
Alex
&
If my answer was helpful pls mark it and additional thx if u follow me at Q&A portal
and at my blog https://ctrlaltdel.blog/