Confirm customer acceptance and create agreement for MCA using APIs

Applies to: Partner Center

Doesn't apply to: Partner Center operated by 21Vianet | Partner Center for Microsoft Cloud for US Government

Partner Center currently supports confirming customer acceptance of the Microsoft Customer Agreement (MCA) only in the Microsoft public cloud. This article describes how to confirm or reconfirm customer acceptance of the MCA and then create the agreement for a particular customer. This information applies to Indirect Provider and Direct Bill CSP partners. Indirect Resellers can't use this experience.

Prerequisites

• Credentials as described in Partner Center authentication. This scenario only supports AppOnly authentication.

• Information about the user from the customer organization that accepted the MCA, including:

  • First name
  • Last name
  • Email address
  • Phone number (optional)
  • Company name

If the following values change for a customer, Partner Center allows you to create another agreement for that customer. The First name, Last name, Email address, and Phone number must differ. Otherwise, partners receive the following error code, due to a duplicate record being created.

{
"code": 600061,
"message": "A partner confirmed agreement already exists for the customer.",
"description": "A partner confirmed agreement already exists for the customer.",
"errorName": "PartnerConfirmedAgreementAlreadyExists",
"isRetryable": false,
"parameters": {},
"errorMessageExtended": "InternalErrorCode=600061"
}

Create Partner attestation and agreement creation using APIs

The enhanced attestation API helps partners create and manage customer attestations that they can embed within a checkout flow. Partners can then use the customer attestation to create an agreement for a particular customer.

To confirm or reconfirm customer acceptance of the MCA and then create an agreement for a customer:

1. Create a new attestation object (attestation ID) by using the Enhanced Customer Attestation API for a customer.

2. Construct the url of the embeddable component that can be used in any checkout flow to accept the MCA. You need to ensure that the customers see the MCA and accept the same using the parametrized link provided by Microsoft.

3. Create the agreement using Create agreement API using the attestation ID.

Using Enhanced Customer Attestation API

Endpoint

POST https://api.partnercenter.microsoft.com/v{version}/attestations/enhanced

Description

Creates an attestation ID for a customer that can then be leveraged to attest the MCA for that customer.

Authorization

• Requires authentication.

• Requires PartnerAuthorize(PartnerApiResource.PartnerConfirmation, ResourceAccess.Create).

Request Body

Example Request

{ "country": "US", "language": "en", "companyName": "Contoso Ltd.", "signatoryFirstName": "John", "signatoryLastName": "Doe", "emailAddress": "[email protected]", "phoneNumber": "+1-555-555-5555" }

Response

Success (201 Created)

{ "attestationId": "00000000-0000-0000-0000-000000000000" }

Error Responses

• 400 Bad Request: Invalid request format.

• 401 Unauthorized: Missing or invalid authorization.

Using embeddable component

The AttestationId returned by the Enhanced Customer Attestation API can be used as a parameter in to the below mentioned link to show the MCA to the customer in an embeddable component. Partners need to ensure that the customers see the MCA and accept the same using the parametrized link provided by Microsoft.

Example of an embeddable iframe with the parametrized link

<iframe src="https://cdn.partner.microsoft.com/mca/?attestationid={id}"></iframe> 

The link renders the MCA agreement and contains an "Accept Agreement" button; selecting the same, calls a POST API that captures the customer's intent to accept the MCA. It's a prerequisite for partners to call Create Agreement API successfully.

Create Agreement API

Creates an agreement on behalf of a customer.

POST https://api.partnercenter.microsoft.com/v{version}/customers/{customer_id}/agreements

URI Parameters

Request Header

Media Types: "application/json"

Request Body

Media Types: "application/json"

Responses

Definitions

Microsoft.Partner.Service.Customers.Contracts.V1.Agreement

Microsoft.Partner.Service.Customers.Contracts.V1.Contact

Example request payload

Sample payload when enhanced attestation API is used

{"userId": "80fdc6b6-ad7c-4783-be01-7b8002d2a949","attestationId": "d7cb60a6-b8d3-486a-b7f5-b17ef03d3427","templateId": "117a77b0-9360-443b-8795-c6dedc750cf9","dateAgreed": "2025-06-03T16:42:12","type": "MicrosoftCustomerAgreement"} 

In case the user wants to use the existing method of attestation (till it is deprecated) and not the new enhanced API then they can call the Create Agreement API with the primary contact details