Microsoft Partner Center

Configuring Microsoft Partner Center integration with Work 365.

The Work 365 Partner Center Integration enables Partner Center data, such as subscriptions, agreements, and provider invoices, to have a bi-directional sync with Work 365.

Prerequisites

  • Work 365 Partner Center integration is applicable to Direct CSP Partner having a Partner tenant.
  • This integration user in Partner Center must have the following roles:
    • Sales Agent: permissions assigned in Partner Center.
    • Billing Admin: to download Invoices from Microsoft for Azure and cost management
  • This integration user in Partner Center must have MFA enabled MFA Setup for Partner Center Integration Account

There are three main steps in setting up the integration with Partner Center and Work 365

Step 1: Create the Integration user with the right permissions

Step 2: Collect the Integration information for the settings required in Work 365

Step 3: Creating the Provider Connection and entering the settings acquired in Step 2

Step 4: Complete the Consent using the integration account created in Step 1

Step 1: Creating the Integration Account

The following steps describe the process of creating the Integration account.

  1. Create a new user in your partner center that you can use for the integration e.g. work365integration@[yourpartnercenterdomain]
  2. In the Manages your organization's account as section, select Billing admin
  3. In the Assists your customers as section, select Sales agent

At this point, a summary screen with a temporary password would be displayed. Use the credentials to verify access and confirm you can login using the credentials with MFA enabled.

🚧

MFA required for integration user

MFA must be enabled on the Integration user. The MFA cannot be conditional and must be configured to trigger on every login

Some helpful links

Step 3: Collecting Additional Partner Center Information for the Work 365 integration

From within Partner Center, collection the following additional information

  1. Microsoft ID (aka Tenant ID) (from the Account settings section)
  2. Reseller request URLs (from request a reseller relationship link on the Customers list)
  3. Note the day of the billing start of the 'D' invoice billing cycle. (from the Billing section)

Step 4 Creating the Partner Center Provider

Using the onboarding App

Or Directly from Within Work 365

  1. Go to Work 365, “Administration” in the bottom-left menu. Next click on “Admin Hub” in the left menu.
  2. Under “Configuration” at the top of the screen, click on the “Integrations” tab.
  3. Click and open the existing “Microsoft Partner Center” provider by clicking on the gear icon on the right.
  4. After opening the provider complete the details on the form as given below:
FieldSetting Value
NameCan identify Partner Center name by location (ie. Microsoft US Partner Center)
Country CodeCountry where partner center is registered
Currency CodeThe Partner Center Currency
Billing Start DateThis setting is only used if you are billing Azure through Legacy (D Invoices)
Reseller Relationship URLURL you copied from Step 3
Delegated Admin Authorize URLURL for your customers to accept your delegated Admin Step 3
Cost ManagementManages Costs for CSP Subscriptionsduring subscription sync
Usage Mismatch ToleranceAllows users to set a default tolerance that will be used when importing invoices via the UI or in the background
Azure SpecializationPartners specializing in one or more Azure workloads receive discounts on some consumption line items based on their Azure Specialization

Settings in Bold are required and Items in Italics are Recommended

  1. Save the record to continue the configuration process.

Step 5: Configuring the Partner Center using the Consent Framework

Note: MFA for the Partner Center Integration account MUST be enabled.

  1. Reopen the connector record that was just created.
  2. The “Generate Consent Link” button should now appear – click this link to open a popup window with the consent instructions.
  3. Click the link icon to copy the consent link to the clipboard. Paste the link into a new private browser window (use Incognito/InPrivate browsing mode) and follow the instructions from the previous window for consent.

🚧

InPrivate / Incognito Window required

It is essential to complete this step in Private browsing window or a new browser, so you don't confuse the system with the integration account and your own Azure AD identity.

  1. Click the Start Consent Process button. Login with the Partner Center Integration Account when prompted and confirm the MFA.
  2. Go back to the Integration tab in the Admin Hub. Hit the gear icon on the Microsoft provider and click on the “Verify Connectivity” button. If the settings are correct, you should receive a successful confirmation; if the connectivity fails, redo the consent with the Integration user and try again.

👍

Your Partner Center Integration is complete in Work 365