Individual identity validation failed after Authenticator sharing error

Grant Holder 0 Reputation points
2026-10-15T05:05:25.14+00:00

I am setting up Artifact Signing as an individual in the United States.

I completed the AU10TIX government ID check, added the Verified ID to Microsoft Authenticator, and shared it when prompted. Sharing returned an error.

The verification link then said it had already been used. Azure now shows Failed, but neither the identity details nor the notification email provides a reason.

How can I determine the failure reason and safely retry verification? Should the failed request and associated Verified ID be removed first?

Artifact Signing
Artifact Signing

A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)

0 comments No comments

2 answers

Sort by: Most helpful
  1. Grant Holder 0 Reputation points
    2026-10-15T05:09:31.5533333+00:00

    Thank you. My Azure subscription has Basic support, and the portal directs me to purchase a technical support plan. Can a Microsoft moderator help investigate this identity-validation failure or provide a support route that does not require upgrading? I can provide the validation request ID and account details privately.

    Was this answer helpful?

    0 comments No comments

  2. AI answer

    2026-10-15T05:06:21.65+00:00

    The consumed verification link cannot be reused, so first ask Azure Support to identify the backend failure reason; then either reuse the existing valid Verified ID or perform a clean retry if support confirms that the credential or identity data failed.

    1. Obtain the actual failure reason

    Because the portal and notification email expose no reason, further client-side attempts cannot determine which validation stage failed. Similar Artifact Signing cases with a successful identity check followed by an unexplained Failed status required Microsoft to inspect the Identity Validation ID and account details in backend logs.^1^

    In Azure portal → Help + support → Create a support request, provide:

    • Artifact Signing account name and Azure region
    • Identity Validation request ID
    • Approximate UTC time of the Authenticator sharing attempt
    • Current status: Failed
    • Exact Authenticator sharing error, including a screenshot if available
    • Confirmation that AU10TIX completed and the Verified ID was added
    • Confirmation that reopening the original link says it was already used
    • Any correlation or request ID shown by the browser, portal, or Authenticator

    Ask support to identify whether the failure was:

    • A Verified ID presentation/processing error
    • An address, name, or FaceCheck mismatch
    • A transient backend failure
    • Another validation-stage rejection

    Do not create several concurrent requests while waiting. Microsoft states that additional requests for the same entity while one is in progress do not help, and validation cannot be expedited.^2^

    2. Retry according to the diagnosed result

    If support identifies a transient sharing or processing error

    Keep the existing Verified ID if it remains valid. Artifact Signing supports presenting an existing, non-expired Verified ID, so removing it is not automatically required.^2^

    Before opening the new verification link:

    1. Fully close every Microsoft Authenticator instance.
    2. Update Authenticator to the latest Android or iOS version.
    3. Clear the browser cache or use another browser.
    4. Disable VPN/proxy and use a stable connection.
    5. If the sharing error recurs, try another supported phone.

    These are Microsoft’s documented steps for technical errors during Authenticator and Verified ID validation.^2^

    If support identifies an address, name, or FaceCheck failure

    Perform a clean retry:

    1. Delete the failed identity-validation request.
    2. Remove its associated Verified ID from Microsoft Authenticator.
    3. Submit a new identity-validation request.
    4. Create a new Verified ID, checking that all identity information is accurate.
    5. For FaceCheck, use an adequately lit environment.

    Microsoft explicitly requires both request deletion and Verified ID removal for these three failure categories.^2^

    3. Safely delete the failed request when a clean retry is required

    A request that is no longer In Progress can be deleted:

    1. Open Azure portal → Artifact Signing account.
    2. Select Identity Validation.
    3. Select the failed request and choose Delete.
    4. Review the listed Artifact Signing accounts and linked certificate profiles.
    5. Delete only after confirming that nothing active depends on it.

    You need the Artifact Signing Identity Verifier role. The deletion is irreversible and can stop certificate renewal for linked profiles, so check the dependency list even if this is an initial setup.^3^

    If New identity validation is unavailable afterward, verify that the same role is still assigned; identity validation itself is completed only through the Azure portal, not Azure CLI.^4^

    In short: delete the failed request only when starting a replacement request, but remove the Verified ID as well only if it is invalid/expired or support confirms an address, name, or FaceCheck failure. For an unexplained sharing error, preserve the credential until backend diagnosis determines whether it is reusable.


    References

    1. Artifact Signing ID validation fails repeatedly 9afac007-6e27-4e93-84b1-34ac87fcdc90 - Microsoft Q&A
    2. Artifact Signing FAQ
    3. Renew or delete Artifact Signing Identity Validations
    4. Quickstart: Set up Artifact Signing
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.