Microsoft CSP Partner Program Updates August 2025

0:00

/1117.692517

1×

Critical Deadlines and Actions

• August 30, 2025
  • MFA Enforcement for Partner Center Portal: Multifactor authentication (MFA) will be enforced for all pages in the Partner Center portal. Partners should adopt these updates promptly to avoid service disruptions and ensure alignment with Partner Center's security standards.
• August 31, 2025
  • Graph.windows.net Audience Tokens Retirement: All Partner Center services that use Azure Active Directory Graph API will migrate to api.partnercenter.microsoft.com. Technical teams must stop decoding the token in the API response if using the generateToken API and remove any dependency on claims in the token. They should update their systems before this date to avoid business disruption, using the new generateToken API version which accepts https://api.partnercenter.microsoft.com as the resource.
• September 1, 2025
  • Windows 10 Extended Security Updates (ESU) Commercial Launch: The commercial launch of the Windows 10 ESU offer is set for this date, ahead of Windows 10 end of support in October 2025. Windows 10 ESU will be available for Cloud Solution Provider (CSP) partners, offering critical and important security updates for one, two, or three years post-end-of-support. Partners can purchase all three years of ESU at once, with separate SKUs available on the CSP price list and in the Partner Center catalog.
  • No September Preview for NCE License-Based Services Price List: There will be no NCE license-based services preview price list published on August 1 for the September price preview. No changes are scheduled at this time for the September 1 license-based services price list.
• September 22, 2025
  • Microsoft AI Cloud Partner Program Agreement Updates Effective: The updated terms of the Microsoft AI Cloud Partner Program Agreement will automatically take effect for current partners. No action, signature, or acknowledgment is required from partners.
• September 30, 2025
  • Microsoft Publisher Agreement Updates Effective: The updated terms of the Microsoft Publisher Agreement will automatically take effect for current partners. No action, signature, or acknowledgment is required from partners.
  • Partner Center API Code-Ready for MFA: The Partner Center API will be code-ready for MFA.
• October 7, 2025
  • Microsoft Customer Agreement (MCA) Reacceptance Required: Cloud Solution Provider (CSP) partners who attested to the MCA on behalf of their customers before April 1, 2023, must ensure those customers reaccept the updated MCA terms. If customers have not reaccepted, partners will be blocked from completing subscription management actions such as new purchases, quantity increases, term duration/billing plan changes, and upgrades. Partners can use the MCA bulk attestation tool or look for banners in Partner Center to identify customers requiring reacceptance.
  • Bulk Attestation Tool Update Feature Removal: The update feature of the MCA bulk attestation tool will be removed. After this date, the tool will only provide a list of customers that require action.
• October 14, 2025
  • Windows 10 End of Support: Windows 10 reaches its official end of support. For customers enrolled in the ESU program, coverage will commence after this date.
• Beginning December 1, 2025
  • Partner of Record (POR) Validation Enforcement for CSP Orders: Microsoft will enforce Partner of Record (POR) validation for all new Cloud Solution Provider (CSP) orders. Transactions will be blocked if the indirect reseller assigned as POR is out of compliance. Updates to both the Partner Location Account (PLA) API and UI in Partner Center will be implemented to check reseller compliance for new subscription orders and changes to existing subscriptions.
  • Actions for Distributors and Resellers to Ensure Compliance:
    • Distributors should use the POR validation API for all compliance checks to get real-time validation of a reseller's eligibility before placing an order or making changes. They must work with resellers to correct any errors indicated by the system.
    • Indirect Resellers must verify their PLA ID is valid (not a Partner Global Account (PGA) ID), linked to an active CSP indirect reseller tenant, and that their CSP tenant's business address is in the same CSP region as their distributor's tenant. They should also regularly review and update their Partner Center profile and contact details.
• After January 5, 2026
  • MCA Acceptance Methods Change: The existing Partner Center UX and current API for MCA attestation will no longer be available. Only a new, enhanced partner attestation API or direct customer acceptance in the Microsoft 365 admin center will be available for accepting the MCA.
• April 1, 2026
  • MFA Mandatory for Partner Center API Access: Multifactor authentication (MFA) will become mandatory for API access to the Partner Center portal.

What are the key updates for Microsoft partners?

1. The primary purpose of the updated Microsoft Publisher Agreement is to ensure alignment with current business practices and regulatory requirements. For current partners, changes become effective automatically on September 30, 2025, without requiring any action from either party.
2. NPSA reporting helps CSP partners grow revenue by providing a consistent view of Microsoft 365 customer growth, enabling them to track net changes in paid seats. This data allows partners to identify growth opportunities, proactively address churn, and make data-driven decisions affecting their CSP revenue.
3. Two key compliance requirements for an indirect reseller to be a valid Partner of Record (POR) are having an active CSP tenant associated with an authorized Partner Location Account (PLA ID) and ensuring their CSP tenant's business address is in the same CSP region as their distributor's tenant. They must also accept the Microsoft Partner Agreement (MPA) for indirect resellers.
4. The Partner Center AI assistant enhances accessibility and productivity by being localized and available in multiple languages, making it easier for partners worldwide to engage in their preferred language. It offers tailored insights, intelligent suggestions, and quick answers to optimize Partner Center tasks.
5. The critical deadline for the retirement of graph.windows.net audience tokens is August 31, 2025. Partners are required to update their systems to use https://api.partnercenter.microsoft.com as the resource for authentication and to transition to the new version of the generateToken API.
6. Multi-Factor Authentication (MFA) will be enforced for all pages in the Partner Center portal starting August 30, 2025. It will become mandatory for API access beginning April 1, 2026.
7. The main goal of the Windows 10 Extended Security Updates (ESU) program is to provide critical and important security updates for Windows 10 devices beyond their End of Support date in October 2025. This program allows customers to receive updates for up to three additional years.
8. Starting September 1, 2025, the ESU offer type for CSP partners shifts from a software subscription to a perpetual offer, simplifying the purchasing experience. This change allows partners to purchase all three years of ESU at once, with separate SKUs available for each year.
9. The critical deadline for customers to reaccept the Microsoft Customer Agreement (MCA), if their partners previously attested on their behalf before April 1, 2023, is October 7, 2025. Failure to do so will result in blocked subscription management actions.
10. If customers do not reaccept the MCA by October 7, 2025, partners will be blocked from completing several subscription management actions. These include new purchases, quantity increases, changes to term duration or billing plans, and upgrades for those customers.

What are the key updates to Microsoft's Partner Agreements and when do they take effect?

Microsoft has updated two significant agreements: the Microsoft Publisher Agreement and the Microsoft AI Cloud Partner Program Agreement. Both updates are part of Microsoft's standard business operations to ensure alignment with current practices and regulatory requirements.

The updated Microsoft Publisher Agreement was made available for review on August 29, 2025, and its changes will become automatically effective for current partners on September 30, 2025. No action, signature, or acknowledgment is required from partners.

Similarly, the Microsoft AI Cloud Partner Program Agreement was updated on August 22, 2025, and its changes will automatically take effect for current partners on September 22, 2025, also without requiring any action from partners.

What is Net Paid Seat Adds (NPSA) reporting and how does it benefit CSP partners?

Net Paid Seat Adds (NPSA) reporting is a new feature now available in Partner Center, designed to provide Cloud Solution Provider (CSP) and Scale Solution Partners (SSP) with a comprehensive view of their Microsoft 365 customer growth. NPSA metrics are the same performance metrics used internally by Microsoft teams.

Benefits for CSP partners include:

• Enhanced Understanding: Partners can better understand the state of their Microsoft 365 cloud install base.
• Timely, Informed Action: It enables partners to take proactive steps to address churn and identify growth opportunities.
• Improved Alignment: NPSA reporting facilitates stronger alignment, more productive business reviews, and clearer performance management conversations with Microsoft.
• Data-Driven Decisions: Partners can track net changes in paid seats over time, broken down by new customers, net expansion, and churn, and segment customers by size to make data-driven decisions that impact CSP revenue.

NPSA is measured by comparing the current period's end-of-period (EOP) seats to the prior period's EOP seats for specific cloud products.

What significant changes are being made to Partner of Record (POR) validation for CSP resellers?

Microsoft is implementing important updates to the Partner Location Account (PLA) API and UI in Partner Center to streamline the process for distributors to assign active, compliant indirect resellers as Partners of Record (POR). These updates will be implemented beginning December 1, 2025.

Key changes and requirements for compliance include:

• Compliance Checks: Both the API and UI will check if the reseller is compliant with program terms for new subscription orders and changes to existing subscriptions (excluding auto-renewals). This includes seat count, billing plan, term changes, P2P transfers, and legacy-to-new commerce migrations.
• Error Messages: If a reseller is non-compliant, an error message will be displayed, requiring distributors to work with the reseller or assign a different, valid POR.
• GDAP Revocation: If a reseller tenant is detected as inactive, granular delegated admin privileges (GDAP) across their customer accounts will be revoked.
• POR Validation API: A new POR validation API has been released to help distributors programmatically check a POR's eligibility in real-time before submitting an order or making changes.

To be compliant, indirect resellers must:

• Verify their PLA ID is a valid PLA ID (not a PGA ID) and linked to an active CSP indirect reseller tenant.
• Ensure their CSP tenant's business address is in the same CSP region as their distributor's tenant.
• Accept the Microsoft Partner Agreement (MPA) for indirect resellers.

Initial enforcement of POR validation via API for all new CSP orders was previously announced for September 1, 2025, but has been adjusted to December 1, 2025, to allow sufficient preparation time.

What is the Partner Center AI assistant and in what languages is it available?

The Partner Center AI assistant (preview) is an intelligent tool seamlessly integrated into Partner Center, designed to offer tailored insights, intelligent suggestions, and quick answers to partners' day-to-day questions. It aims to optimize Partner Center tasks and enhance accessibility and productivity.

The AI assistant can provide responses from Microsoft product documentation, partner program guides, and partner-specific data. If further assistance is needed, partners can create a support ticket directly through the AI assistant panel, with the problem summary and conversation history automatically populated.

Microsoft has expanded the availability of the Partner Center AI assistant to include multiple languages. It is now localized and available in:

• English
• German
• Japanese
• Spanish
• French
• Italian
• Portuguese (European Portuguese)
• Chinese (Chinese Simplified)

What security updates are being enforced across the Microsoft partner ecosystem?

Microsoft is implementing several critical security updates to improve the security posture of partners and protect customer tenants.

Key security updates and enforcement dates include:

• Graph.windows.net Audience Tokens Retirement: All Partner Center services using Azure Active Directory graph API are migrating to api.partnercenter.microsoft.com. Partners must update their systems to stop using tokens with resource https://graph.windows.net by August 31, 2025, to avoid business disruption. A new version of the generateToken API is available.
• MFA for Microsoft 365 Admin Center: Multifactor Authentication (MFA) is being enforced for all users signing into the Microsoft 365 admin center portal.
• Security Workspace AI Assistant: A specialized AI assistant is now available within the Security Workspace in Partner Center to help partners resolve queries, clarify requirements, and navigate learning resources efficiently.
• Redesigned Security Requirements UI: The Security requirements experience in Partner Center has been redesigned to clearly separate mandatory and recommended controls, making it easier for partners to identify essential security requirements for continued CSP authorization.
• MFA for Partner Center: MFA will be enforced for all pages in the Partner Center portal starting August 30, 2025. For API access, MFA will be code-ready by September 30, 2025, and mandatory starting April 1, 2026.

Partners are urged to adopt these updates promptly to avoid service disruptions and ensure alignment with Partner Center’s security standards.

What is the Windows 10 Extended Security Updates (ESU) Program and when will it be available?

The Windows 10 Extended Security Updates (ESU) Program is designed to provide critical and important security updates for up to three years beyond the official end-of-support date for Windows 10, which is October 14, 2025. This program helps commercial customers maintain security and compliance while they transition to Windows 11.

Key details of the ESU program:

• Commercial Launch: The commercial launch of the Windows 10 ESU offer is set for September 1, 2025.
• Paid Subscription: ESU is a paid program, offering an annual subscription service for individuals and organizations to continue receiving security updates.
• Availability for CSP Partners: Beginning September 1, 2025, Windows 10 ESU will be available for Cloud Solution Provider (CSP) partners, offering protection for one, two, or three years.
• Simplified Purchasing: The ESU offer shifts from a software subscription to a perpetual offer type, allowing partners to purchase all three years of ESU at once, with separate SKUs for each year. These SKUs will be available on the CSP price list and in the Partner Center catalog on September 1, 2025.
• Coverage Commencement: ESU coverage will commence after October 14, 2025, aligning with the end of Windows 10 support.

What action is required regarding the Microsoft Customer Agreement (MCA) reacceptance?

Cloud Solution Provider (CSP) partners who previously attested to the Microsoft Customer Agreement (MCA) on behalf of their customers using legacy methods before April 1, 2023, must ensure their customers reaccept the updated MCA terms. This action is required by October 7, 2025.

Consequences of non-reacceptance: Beginning October 7, 2025, partners will be blocked from completing several Partner Center actions for affected customers, including:

• New purchases
• Quantity increases
• Term duration or billing plan changes
• Upgrades

How to identify and resolve: Partners can identify customers requiring reacceptance using the MCA bulk attestation tool or by looking for banners in the Partner Center Customer workspace. To unblock actions, partners must attest using existing Partner attestation methods, the new Partner attestation API, or have the customer directly accept the MCA. Only direct bill partners and distributors have the authority to confirm customer acceptance through Partner Center or APIs.

The update feature of the bulk attestation tool will be removed on October 7, 2025. After January 5, 2026, only two methods for accepting the MCA will remain: an enhanced partner attestation API or direct customer acceptance in the Microsoft 365 admin center.

Are there any changes to the New Commerce Experience (NCE) license-based services price list for September 2025?

Microsoft has informed all Cloud Solution Provider (CSP) partners that there will be no NCE license-based services preview price list published on August 1, 2025, for the September price preview.

This means that no changes are scheduled at this time for the September 1 license-based services price list. Partners should not expect a preview of September prices for NCE license-based services in August. Partners are advised to review the NCE license-based price list in the Partner Center Pricing workspace to find the offers included each month.

Details and Key Actions

1. Security Enhancements and Enforcement

Microsoft is significantly bolstering security across its partner ecosystem, with several mandatory changes and new tools.

• Graph.windows.net Audience Tokens Retirement:
  • Fact: All Partner Center services using Azure Active Directory Graph API are migrating to api.partnercenter.microsoft.com.
  • Action Required: Partners using the generateToken API must update their systems to use the new API version and stop decoding tokens, removing dependencies on claims.
  • Deadline: August 31, 2025, to avoid disruption.
• Multifactor Authentication (MFA) Enforcement:
  • Fact: MFA is being enforced for all users signing into the Microsoft 365 admin center portal.
  • Fact: MFA will be mandatory for all pages in the Partner Center portal starting August 30, 2025.
  • Fact: The API will be code-ready for MFA on September 30, 2025, with mandatory API access MFA starting April 1, 2026.
  • Action Required: Partners must ensure their tenants and users are configured for MFA to maintain access and avoid service disruptions.
• New Security Tools and UI:
  • Fact: A new Security Workspace AI Assistant is available in Partner Center to help with queries, clarify requirements, and navigate resources. Access it via the AI button in the top-right corner of the dashboard.
  • Fact: The Security requirements UI in Partner Center has been redesigned to clearly separate mandatory and recommended controls, making compliance easier to understand.

2. Partner Program Agreement Updates

Two key partner agreements are being updated, becoming effective automatically.

• Microsoft Publisher Agreement:
  • Fact: The updated agreement is available for review.
  • Effective Date: Changes become effective automatically for current partners on September 30, 2025, "without further action by either party."
  • Microsoft AI Cloud Partner Program Agreement:Fact: The updated agreement is available for review.
  • Effective Date: Changes become effective automatically for current partners on September 22, 2025, "without further action by either party."

3. Enhanced Reporting and Tools for Customer Growth

Microsoft is providing new tools and reporting to help partners understand and drive customer growth.

• Net Paid Seat Adds (NPSA) Reporting:
  • Fact: NPSA reporting is now available in Partner Center for Cloud Solution Provider (CSP) and Scale Solution Partners (SSP).
  • Purpose: Provides a "consistent, transparent view of Microsoft 365 customer growth," using the same metrics as Microsoft's internal teams.
  • Key Capabilities: Partners can track net change in paid seats over time (new customers, net expansion, churn), assess trends across customer segments, and view customer tenants' NPSA month-over-month.
  • Benefit: Aims to empower partners to "better understand the state of your Microsoft 365 cloud install base and take timely, informed action."

4. Partner of Record (POR) Validation Updates and Enforcement

Significant changes are coming to how Partner of Record (POR) validation is handled, with strict enforcement deadlines.

• POR Validation Enforcement Date:
  • Initial Announcement: Enforcement via API for all new CSP orders beginning September 1, 2025.
  • Revised Enforcement Date: "To ensure indirect resellers and distributors have sufficient time to prepare," the updates to the PLA API and UI in Partner Center will be implemented beginning December 1, 2025. On this date, both API and UI will check reseller compliance for new subscription orders and changes to existing subscriptions.
  • Impact: Transactions will be blocked if the indirect reseller assigned as POR is non-compliant.
  • Compliance Requirements for Indirect Resellers:An active CSP tenant associated with an authorized Partner Location Account (PLA ID, formerly MPN ID).
  • Acceptance of the Microsoft Partner Agreement (MPA) for indirect resellers.
  • Association with a distributor in the same CSP region.
• New Tools and Resources:
  • POR Validation API: Released to allow distributors to "programmatically check a POR they would like to attach to a subscription" in real-time before placing an order.
  • Updated Documentation: Enhanced error code definitions and remediation steps for POR validation failures.
  • New Indirect Reseller Instructions: A guide outlining how indirect resellers can resolve compliance issues.
  • Action Required (Distributors): Use the POR validation API, familiarize themselves with error codes, and ensure resellers keep their profiles current.
  • Action Required (Indirect Resellers): Verify PLA ID, ensure it's linked to an active CSP indirect reseller tenant, and confirm the CSP tenant's business address is in the same CSP region as their distributor.

5. Microsoft Customer Agreement (MCA) Reacceptance

Partners who previously attested to the MCA on behalf of their customers must ensure reacceptance.

• Action Required By: October 7, 2025.
  • Impact of Non-Compliance: If customers have not reaccepted the updated MCA terms, partners will be blocked from completing critical Partner Center actions (new purchases, quantity increases, upgrades, etc.).
  • Affected Partners: Those who attested for their customers using legacy API, Partner Center UX, or bulk attestation tool before April 1, 2023.
  • Methods for Reacceptance: Partner attestation (via existing methods or new API) or direct customer acceptance.
  • Tool Removal: The "update" feature of the bulk attestation tool will be removed on October 7, 2025. After January 5, 2026, only the new enhanced partner attestation API or direct customer acceptance will be available.

6. Windows 10 Extended Security Updates (ESU) Program

As Windows 10 approaches its end of support, an ESU program is being launched.

• Commercial Launch Date: September 1, 2025.
  • Purpose: To provide "critical and important security updates for up to three years beyond the end of support date" for Windows 10 (October 14, 2025), allowing customers time to transition to Windows 11.
  • Program Details: ESU is a paid, annual subscription program. For CSP partners, it shifts from a software subscription to a perpetual offer type, allowing purchase of "all three years of ESU at once, with separate SKUs for each year."
  • Availability for CSP: ESU SKUs will be available on the CSP price list and in the Partner Center catalog on September 1, 2025.
  • Coverage Commencement: After October 14, 2025.

7. Partner Center AI Assistant Localization

The Partner Center AI assistant is expanding its linguistic capabilities.

• Fact: The Partner Center AI assistant (preview) is now "localized and available in additional languages": English, German, Japanese, Spanish, French, Italian, Portuguese (European Portuguese), and Chinese (Chinese Simplified).
• Benefit: Enhances accessibility and productivity for partners globally.
• Capabilities: Offers tailored insights, intelligent suggestions, quick answers, optimizes Partner Center tasks, and can create support tickets.

8. CSP Monthly Updates and Resources

Microsoft continues to provide regular updates and resources for CSP partners.

• Available Resources: Partner launch calendars, CSP Bimonthly Update newsletter, Partner Journey Maps, and monthly CSP spotlight webinars.
• CSP Community Q&A: Monthly sessions available for partners to "learn more and ask questions about changes affecting the program."

9. Price List Update

A specific update regarding the September preview for NCE license-based services price list.

• Fact: There will be no NCE license-based services preview price list published on August 1, 2025, for the September price preview.
• Fact: "No changes are scheduled at this time for the September 1 license-based services price list."

CSP Billing Ultimate 2025

Elite Growth Platform for Ambitious Businesses