Artifact Signing identity validation In Progress for more than seven days

Scott 0 Reputation points
2026-11-03T17:08:38.61+00:00

Our organization’s identity validation remains In Progress. We have not created a certificate profile because identity validation has not completed.

The portal’s automated troubleshooting reported missing certificate-profile status and timestamps, but no certificate profile exists yet.

We have Basic support and cannot open a technical support ticket. Can someone help determine whether our validation is awaiting review or requires additional action, and provide an escalation path?

Artifact Signing
Artifact Signing

A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)

0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-11-03T17:09:45.21+00:00

    An organization identity validation can remain In Progress for 1–20 business days, so if you are still within that window, monitor the request and primary contact mailbox; if it exceeds 20 business days with no Action Required email, request a validation-team review through Microsoft Q&A or Azure Support.

    What the current state means

    • In Progress means validation is still processing. If Microsoft requires documents or individual verification, the status should change to Action Required and instructions are sent to the primary email address.
    • The final status becomes Completed or Failed, with an email notifying the primary contact. ^1^
    • Identity validation can take 1–20 business days and can require additional documentation. ^2^

    The certificate-profile warning from automated troubleshooting does not apply at this stage. A completed identity validation is a prerequisite for creating a certificate profile, so the absence of profile status and timestamps is expected while validation remains pending. ^3^

    Actions to take now

    1. Open Azure portal → Artifact Signing account → Objects → Identity validations.
    2. Select the organization validation and check whether the status or details show an action link.
    3. Check the primary email address entered on the request for:
      • The initial email-verification link.
      • A request for individual identity verification.
      • Requests for additional organization documents.
      The mailbox must accept external messages containing links. Verification links expire after seven days. ^1^
    4. If a valid verification message exists, complete that action. A closely matching case remained In Progress until the primary-email verification link was used. ^4^
    5. Do not create duplicate validation requests while this request is active. Microsoft states that duplicate requests for the same entity do not help and that validation requests cannot be expedited. ^5^

    If no email was received or the link expired, mention that explicitly in the escalation. The FAQ normally directs customers to submit a new request for a missing or expired link, but an In Progress validation cannot be deleted through the normal identity-validation page. Do not create a parallel request unless Microsoft Support or the validation team directs you to do so. ^2^

    Escalation when Basic support blocks a technical ticket

    Basic support does not include Azure technical support; technical cases require an eligible support plan. ^6^

    Use these routes:

    1. Microsoft Q&A: Keep this question tagged Artifact Signing and ask a moderator to route the validation ID privately to the Artifact Signing validation team. The Artifact Signing FAQ explicitly identifies Microsoft Q&A and Azure Support as the assistance channels. ^5^ Similar delayed cases were resolved after the validation team reviewed the request. ^7^
    2. Azure Support, if your organization has another entitlement: In the affected Artifact Signing resource, select Support + Troubleshooting → Create a support request. Select the affected subscription and Artifact Signing service. ^6^

    Provide privately:

    • Identity Validation ID
    • Subscription and Artifact Signing account
    • Request creation date and current status
    • Validation type, such as Organization / Public
    • Whether the primary-email link was received and completed
    • Dates of any verification or document submission
    • Screenshot of the status and any correlation ID

    Do not post subscription IDs, email addresses, documents, or identity evidence publicly.


    References

    1. Quickstart: Set up Artifact Signing
    2. Renew or delete Artifact Signing Identity Validations
    3. Artifact Signing resources and roles
    4. Artifact signing: identity validation takes very long - Microsoft Q&A
    5. Artifact Signing FAQ
    6. Create an Azure support request
    7. Code Signing Certificate stated in progress longer than 7 days. - Microsoft Q&A
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.