Artifact Signing: can a Polish sole proprietorship pass Public Trust organization validation?

A Polish sole proprietorship can apply through Organization → Public as a business/DBA, but Microsoft’s published guidance does not definitively state that every CEIDG sole proprietorship qualifies as a “legal business entity” or guarantee that it will pass validation.

1. Eligibility of a Polish sole proprietorship

Poland is within the European Union, where Public Trust certificates are available to organizations. The organization workflow explicitly covers an “Organization or a DBA” and requires a legal business name, website, business-domain email addresses, business identifier, registered address, and an individual representing the business. ^1^

Therefore, the appropriate application route is:

1. Azure portal → Artifact Signing Accounts → select the account.
2. Under Objects, select Identity validations.
3. Select Organization → New Identity → Public.
4. Enter the sole proprietorship’s registered business details exactly as they appear in public records:
   • Registered business name.
   • Business identifier, such as the identifier by which the business can be found in the relevant public record.
   • Registered address.
   • Website belonging to the business.
   • Two monitored email addresses on the business-owned domain.
   • The proprietor’s legal first and last name as shown on the government-issued ID.
5. Review Certificate subject preview, then select Create.

Keep the CEIDG and other public records current and consistent before submitting. Microsoft specifically says that current public records facilitate organization onboarding. ^1^

There is public evidence of Microsoft processing a Public organization identity validation for a Polish sole proprietorship, including correcting a verification-link problem for that request. However, that case confirms that the request entered the organization-validation workflow—not that all Polish sole proprietorships are categorically eligible or automatically pass. ^2^

2. Accepted documents and CEIDG extracts

Microsoft does not publish a country-specific document matrix confirming that a CEIDG extract, by itself, is an accepted or sufficient document.

The documented process is:

• Microsoft first evaluates the submitted information and public business records.
• If additional evidence is needed, the request changes to Action Required and Microsoft sends an email containing instructions for uploading the requested documents.
• The applicant should submit the particular documents requested for that validation rather than assuming that one document type will be sufficient. ^1^

A current CEIDG extract is relevant evidence of registration, but acceptance cannot be guaranteed from the published material. Keep supporting evidence ready for the registered name, NIP/REGON, address, business-domain ownership, and the proprietor’s identity, then provide only what the validation request asks for.

If validation fails without a missed or expired email link, the FAQ says that Microsoft could not make a determination from the information supplied. Additional-document requests are limited to three attempts. Azure Support is the documented assistance channel for identity-validation cases. ^3^

Do not create duplicate requests while one is in progress; the FAQ states that doing so does not help and requests cannot be expedited. ^3^

3. Azure billing-account type

The Azure billing account does not need to have Account Type = Organization for organization identity validation. Microsoft explicitly limits the billing-account-type requirement to individual identity validation. ^1^

You still need:

• A Microsoft Entra tenant.
• A paid Azure subscription; free, trial, and sponsored subscriptions are unsupported.
• The Artifact Signing Identity Verifier role to create the validation request. If New identity validation is disabled, the missing role is the documented cause. ^3^

In short: apply as Organization/Public, not as an individual developer; an Organization-type billing account is unnecessary; and treat document acceptance—including a CEIDG extract—as request-specific until Microsoft publishes a Polish document list or the validation team specifies what to upload.

References

1. Quickstart: Set up Artifact Signing
2. Artifact Signing organization validation (Poland): verification link signs in to the Microsoft Accounts tenant and shows You need permission - Microsoft Q&A
3. Artifact Signing FAQ