Artifact Signing organization validation – "Sorry, you do not meet requirements to create a Verified ID at this time" (US corporation, billing account possibly Individual type)

Jay Rohr 0 Reputation points
2026-11-04T21:57:09.1933333+00:00

I am the president and legal representative of eVanguard Solutions, Inc, a US corporation with more than three years of tax history. I am setting up Azure Artifact Signing (Public Trust) so we can sign our Windows installers.

What I have done:

  • Assigned myself the Artifact Signing Identity Verifier role on the resource group
  • Created the Artifact Signing account
  • Submitted a Public Organization identity validation request, using our exact legal name, EIN and registered business address

The problem:

During the ID verification step, the process ended with the message: "Sorry, you do not meet requirements to create a Verified ID at this time." No reason or retry option was given, and no Verified ID was issued.

Possible cause:

Our Azure billing account (Microsoft Customer Agreement) was set up under my personal name and home address. eVanguard Solutions, Inc appears only as the "Affiliated organization," and the billing account page does not show an Account Type. The Artifact Signing documentation says an Individual billing account can only be used for individual identity validation, so I suspect this mismatch.

Questions:

  1. Can Microsoft confirm the reason this Verified ID was not issued?
  2. Is our billing account an Individual account? If so, how do we change it to Organization?
  3. After that is fixed, should I keep the current validation request or delete it and submit a new one?

I can provide the identity validation ID, subscription ID, tenant ID and the time of the failure privately.

Thank you.

Artifact Signing
Artifact Signing

A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)

0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-11-04T21:58:12.1866667+00:00

    Your MCA billing account does not need an Account Type of Organization for Artifact Signing organization validation, so changing the billing account is not the appropriate fix; open an Azure Support case to have Microsoft inspect the failed Verified ID session and determine the specific rejection reason. Microsoft explicitly states that the Individual billing-account requirement applies only to individual developer validation, not to the individual representative verification performed as part of an organization request.^1^

    Answers to the three questions

    1. Can Microsoft confirm why the Verified ID was not issued? Not from the displayed message alone. It does not identify whether the failure involved the government ID, name extraction, face check, existing Verified ID state, or another eligibility check. Create an Azure support request from Azure portal → Help + support → Create a support request, selecting Artifact Signing as the affected service if available. Microsoft lists Azure Support as the support path for identity-validation problems.^2^ Ask support to:
      • Investigate the failed Verified ID/identity-proofing session.
      • Confirm whether the current organization validation can be reset or reopened.
      • Confirm whether the request must instead be deleted and recreated.
      • Provide a private upload or communication channel.
      Supply privately:
      • Identity validation ID and its current status.
      • Subscription and tenant IDs.
      • Artifact Signing account name and Azure region.
      • UTC date and time of the failure.
      • Screenshot and exact rejection text.
      • Primary email used on the request.
      • ID document type and issuing jurisdiction—but not an ID image or number unless support provides an approved secure-upload channel.
    2. Is the billing account Individual, and must it be changed? That classification cannot be established from the information shown in the question. An MCA is the agreement type; the billing details page can separately show its type, legal entity, and sold-to information. The Microsoft 365 admin center exposes this under Billing → Billing accounts → select the account.^3^ However, the classification does not block the organization-validation flow under the current Artifact Signing requirements. Organization validation collects the organization name, website, business identifier, business address, and representative details directly. It does not require an Azure billing account whose Account Type is Organization.^1^ Therefore, do not change the sold-to party merely to retry this validation. Billing sold-to information identifies the person or organization legally responsible for the account, and some MCA changes require additional verification or Azure Support.^4^
    3. Keep or delete the current validation request? Keep it until support has investigated it, particularly while its status is In Progress. Microsoft states that creating additional requests for the same entity while one is in progress does not help.^2^ Retry only under the matching condition:
      • Name mismatch, face-check error, or stale Verified ID: Delete the existing identity-validation request, remove its associated Verified ID from Microsoft Authenticator, and then create a new request and Verified ID. Ensure your first and last names exactly match the names extracted from the government-issued ID.^2^
      • Expired or missed email link: The link expires after seven days; create a new request because the link cannot be resent on the existing one.^2^
      • Status is Failed without either condition: Have support review it before deletion. The documented meaning is that the validation team could not determine eligibility from the submitted information.

    If deletion is required, use Artifact Signing account → Objects → Identity Validation → select the request → Delete. Only requests that are not In Progress can be deleted. Deletion is irreversible, so first review the displayed linked accounts and certificate profiles.^5^

    Before any supported retry, use the same monitored primary email throughout the flow and enter the representative’s first and last names exactly as shown on the government-issued ID. The organization request’s primary email must use a domain owned by the legal business entity, and its primary and secondary addresses must satisfy the documented organization-form requirements.^1^


    References

    1. Quickstart: Set up Artifact Signing
    2. Artifact Signing FAQ
    3. Understand your Microsoft business billing account
    4. Change contact information for an Azure billing account
    5. Renew or delete Artifact Signing Identity Validations
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.