Artifact Signing organization identity validation stuck “In Progress” for 8 business days, no email received

Cardrama Admin 0 Reputation points
2026-11-04T22:47:32.8766667+00:00

We created an Azure Artifact Signing account (Basic tier, East US) and submitted a Public Trust identity validation for our organization on Sunday, October 25, 2026. As of November 4 it has been “In Progress” for 8 business days, past the 1 to 7 business days in the documentation.

Details:

  • Validation type: Public Trust, Organization
  • The status has not changed since submission, and the request shows no “Action required” message or document upload prompt.
  • We have not received any email from Microsoft about it, and we have checked spam and junk.

Until validation completes, the Create certificate profile page shows “Please complete the Identity Validation”, so we cannot sign anything yet. We are on the free Basic support plan, which does not include technical support tickets.

Questions:

  1. Is this delay normal for a new organization, and is there anything we can do to move it along?
  2. Does Microsoft contact the applicant by email if documents are needed, and if so, from which address, so we can make sure it isn’t being filtered?
  3. If the request is stuck, is there a way to get it reviewed without a paid support plan?

Thanks

Artifact Signing
Artifact Signing

A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)

0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-11-04T22:48:32.3366667+00:00

    Your request is still within the current 1–20-business-day review window, so keep the existing validation request open and use Microsoft Q&A under Artifact Signing for a status review if it remains unchanged; in-progress requests cannot be expedited, and submitting duplicates does not help.^1^^2^

    What to do now

    1. In the Azure portal, open: Artifact Signing account → Objects → Identity validations → select the organization validation.
    2. Check the detail pane, not only the account overview. The expected workflow is:
      • In Progress: Microsoft is still reviewing it.
      • Action Required: open the request and complete the displayed verification or document-upload instructions.
      • Completed or Failed: processing has finished, and Microsoft sends an updated-status email.^3^
    3. Do not create a second request while this one remains in progress. Microsoft states that duplicate requests do not help and that validation cannot be expedited.^2^
    4. If it remains unchanged beyond 20 business days, update this Microsoft Q&A post—or create a dedicated post tagged Artifact Signing—and request a private review of the existing validation. Include:
      • Organization/Public Trust
      • Region
      • Submission date
      • Current status
      • Confirmation that no Action Required instruction appears
      • The validation ID only when a moderator provides a private channel; do not post tenant, subscription, or validation identifiers publicly.

    Microsoft lists both Azure Support and Microsoft Q&A with the Artifact Signing tag as supported assistance channels, so a paid technical support plan is not required to ask for validation help through Q&A.^2^

    Email and document requests

    For organization validation:

    • Verification links and requests are sent to the primary email address entered in the validation request.
    • If more documents are needed, Microsoft sends an email and changes the portal status to Action Required.
    • The primary mailbox must accept messages from external senders and messages containing links.
    • Verification links expire after seven days.^3^

    Microsoft’s public documentation does not specify a fixed sender email address or domain, so there is no documented address that can safely be allow-listed. Since spam and junk have already been checked, ask the mail administrator to search message traces for the primary address around the submission date and for messages containing links that may have been rejected by transport, firewall, or URL-filtering policies.^2^

    When deletion and resubmission applies

    Do not delete this request merely because it has reached eight business days. Deletion and resubmission is the documented recovery path when the required verification email cannot be found or its seven-day link expired; a new link cannot be resent for the same request.^2^

    Before taking that path, inspect the validation detail pane for an email-verification instruction. If none appears and the request remains simply In Progress, retain it through the documented review window and seek a Q&A status review rather than restarting the process.


    References

    1. Renew or delete Artifact Signing Identity Validations
    2. Artifact Signing FAQ
    3. Quickstart: Set up Artifact Signing
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.