Artifact Signing organization identity validation failed — request for assistance

Dae 0 Reputation points
2026-10-12T18:19:42.3633333+00:00

Our organization, Minted Investments LLC, submitted a Public Trust identity validation for Azure Artifact Signing.

During the email-verification process, the primary contact encountered a "You need permission" error because the verification email address was not initially configured as a Microsoft Entra sign-in.

We have since verified our business domain, created the corresponding Entra account, and assigned the Artifact Signing Identity Verifier role.

However, the original identity validation now shows Failed, and the Azure Portal does not provide a specific failure reason.

Could you advise whether this failure resulted from incomplete email verification, and whether we should submit a new identity validation or have Microsoft reset the existing request?

Artifact Signing account: aniduo-signing

Organization: Minted Investments LLC

Identity validation ID: 4ca3b143-08e4-4010-a5ca-7e02b95a2422

Artifact Signing
Artifact Signing

A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)

0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-10-12T18:19:57.82+00:00

    Yes. The failure is consistent with incomplete or failed email verification.

    For Artifact Signing identity validation:

    • The primary email receives a verification link that expires in seven days.
    • If the verification email is missed, cannot be accessed, or the link expires, the current identity validation request must be replaced with a new one.
    • A new verification link cannot be resent for the same request.
    • If email validation shows Failed, the guidance is to create another identity validation request and ensure the email address can receive links from external senders.

    Recommended path:

    1. In the Azure portal, go to the Artifact Signing account aniduo-signing.
    2. Open Identity validations and delete the failed request.
    3. Create a new Organization identity validation for Public.
    4. Confirm the account creating the request has the Artifact Signing Identity Verifier role.
    5. Enter a monitored primary email on a domain owned by the legal business entity, and ensure:
      • it can receive messages from external senders,
      • emails containing links are not filtered,
      • the mailbox is actively monitored so the verification link is completed within seven days.
    6. If the request later shows Action Required, complete the requested follow-up steps from the email and portal.

    Important details for this scenario:

    • Identity validation can only be completed in the Azure portal, not with Azure CLI.
    • Creating additional in-progress requests for the same entity does not help, and requests cannot be expedited.
    • If another identity validation already exists for the same organization with a different primary email address, support is required to continue onboarding.
    • If assistance is still needed after recreating the request, use Azure Support or Microsoft Q&A with the artifact-signing tag.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.