Artifact Signing organization verification returns “You need permission” despite verifier access

Our organization validation is Action Required. The signed-in user can access the signing resource in its Entra directory and has Artifact Signing Identity Verifier at resource scope, inherited subscription Owner and no deny assignments. Opening the exact verification link from the Azure request returns credentials.microsoft.com/verify/noPermission and identifies the personal Microsoft account tenant rather than the enrollment directory. Switching to the correct directory before opening the link does not resolve it. How should this existing enrollment be verified with the authorized identity?