Azure Artifact Signing – Verified ID presentation consistently fails with HTTP 504 Gateway Timeout

Urbain BOSSUYT 0 Reputation points
2026-11-05T13:14:48.8233333+00:00

Thank you for your assistance.Hello,

I am experiencing a persistent issue while completing the organization identity verification required to activate Microsoft Azure Artifact Signing for my company, French Pick.

1. Azure configuration

My Azure Artifact Signing account has been successfully created with the following configuration:

Artifact Signing account: fpwmsigning

Region: North Europe

Pricing tier: Basic

Resource group: rg-fpwm-signing

Service endpoint: https://neu.codesigning.azure.net/

Azure subscription: Active

Resource provider: Microsoft.CodeSigning registered

The Artifact Signing account itself was created successfully. The issue occurs during the identity verification process, not during resource creation.

2. Organization identity verification process

I created a Public Organization Identity Validation request for French Pick through the Azure Artifact Signing portal.

The process requires an individual identity verification using Microsoft Authenticator and Verified ID.

However, the process consistently fails at the final stage.

Here is the exact sequence:

I create an organization identity validation request in Azure Artifact Signing.

I receive and open the identity verification link using Microsoft Authenticator on iOS.

The Face Check process completes successfully.

The application confirms that the identity presentation is authorized.

Microsoft Authenticator attempts to submit the Verifiable Credential to Microsoft's Verified ID service:
https://credentials.microsoft.com/

The submission fails with an HTTP 504 Gateway Timeout error.

The Azure organization identity validation request subsequently changes to Failed.

3. Application diagnostic logs

The diagnostic information displayed by the application confirms the following:

FaceCheckStatus=success

DIDPresentationAllowed

PostPresentationResponseOperation

HTTP statusCode=504

CompleteRequestStatus=failed

FailureStage=response

ErrorCode=WalletLibrary.VerifiedIdNetworkingError:1

This suggests that the individual identity verification itself is successful, but the failure occurs when Microsoft Authenticator attempts to transmit the Verified ID presentation to Microsoft's service.

4. Repeated attempts

I have reproduced this issue multiple times, with the same result.

The identity verification process consistently reaches the same stage before failing.

The browser may briefly display a successful verification message, but after approximately 10 minutes, the organization identity validation request changes to Failed in Azure.

I have also confirmed that the Artifact Signing account is deployed in North Europe, a supported region.

5. Assistance requested

Could the Microsoft Artifact Signing or Verified ID engineering team please investigate the following?

Why does the Verified ID presentation fail with HTTP 504 when the Face Check process has already completed successfully?

Is there a known networking, backend or service-side issue affecting the credentials.microsoft.com Verified ID presentation endpoint?

Does WalletLibrary.VerifiedIdNetworkingError:1 correspond to a known issue?

Is there an alternative way to complete the individual identity verification or manually validate the organization?

Can Microsoft investigate the failed presentation using the diagnostic information above and advise how to proceed without repeatedly creating new identity validation requests?

I would appreciate technical guidance because this issue currently prevents me from completing the organization identity validation required to use Azure Artifact Signing for signing my Windows application executables.

Thank you for your assistance.

Artifact Signing
Artifact Signing

A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)

0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-11-05T13:17:15.06+00:00

    Because the validation is already Failed, perform one controlled clean retry: update and restart Authenticator, delete the failed validation, remove its associated Verified ID from Authenticator, and create one new validation request.

    A matching Artifact Signing report associates the Face Check-success/HTTP-504 flow with a Microsoft-side bug reported fixed on October 28, 2026; a fresh transaction is therefore appropriate, while another 504 should be treated as a potentially stuck transaction or regression and escalated immediately.^1^

    Perform one clean retry

    1. Prepare Authenticator and the connection
      • Update Microsoft Authenticator from the iOS App Store.
      • Force-close every open Authenticator instance, then reopen it.
      • Disable any VPN or proxy and use a stable connection.
      • Clear the browser cache or use another browser.
      • If available, use another phone.
      These are Microsoft’s documented first-line checks for technical failures during Artifact Signing validation with Authenticator and Verified ID.^2^
    2. Delete the failed validation
      • Azure portal → Artifact Signing account → Objects → Identity Validation.
      • Select the failed request and choose Delete.
      • Review the displayed account/profile associations, then confirm deletion.
      The request must not be In Progress, and the user performing this action needs the Artifact Signing Identity Verifier role. Deletion is irreversible and can affect linked certificate-profile renewal; inspect the dependency list before confirming.^3^
    3. Remove the corresponding credential from Authenticator
      • Open Authenticator.
      • Select the Verified ID used for this attempt.
      • Open its options and remove/delete that Verified ID.
    4. Create exactly one replacement request
      • Azure portal → Artifact Signing account → Objects → Identity validations.
      • Select Organization → New Identity → Public.
      • Use the same intended legal-entity details, ensuring the representative’s first and last names exactly match the government-issued identification.
      • Complete the new Authenticator presentation and wait for the portal status.
      A successful individual step returns the organization request to In Progress while the remaining validation continues; final success is Completed.^4^

    Do not create concurrent requests. Microsoft states that additional requests do not help while an identity validation is already in progress.^2^

    If the clean retry also returns HTTP 504

    Submit the Authenticator diagnostics immediately after the failure:

    1. Authenticator → Send feedback.
    2. Select Having trouble?
    3. Submit the form and logs.
    4. Record the resulting incident ID.^5^

    Then open an Azure support request from the affected resource:

    1. Artifact Signing account → Support + Troubleshooting.
    2. If the suggested resolutions do not apply, select Create a support request.
    3. Route it to Azure Artifact Signing and describe it as:
      “Organization identity validation: Face Check succeeds, Verified ID presentation POST returns HTTP 504.”

    Include privately in the support case:

    • Failed and replacement Identity Validation IDs
    • Authenticator incident ID
    • Exact failure time in UTC, including time zone
    • Subscription and tenant identifiers
    • Artifact Signing account, region, and endpoint
    • iOS and Authenticator versions
    • The diagnostic sequence:
      • FaceCheckStatus=success
      • DIDPresentationAllowed
      • PostPresentationResponseOperation
      • HTTP statusCode=504
      • CompleteRequestStatus=failed
      • FailureStage=response
      • WalletLibrary.VerifiedIdNetworkingError:1
    • Confirmation that one clean retry was performed without VPN/proxy
    • Screenshots or exported logs with unnecessary personal data removed

    Azure Support can collect files and diagnostic information and route the case to the relevant engineer.^6^ Similar repeatedly failed Artifact Signing validations have required the validation ID and account details for backend investigation and were subsequently completed by the validation team.^7^

    Error interpretation and alternatives

    • FaceCheckStatus=success establishes that Face Check passed, but the subsequent 504 does not by itself identify whether the timeout occurred in the Verified ID endpoint, a downstream validation component, or transaction state.
    • No public error-code reference in the available Artifact Signing documentation defines WalletLibrary.VerifiedIdNetworkingError:1 more precisely.
    • There is no documented customer-accessible manual or CLI bypass for Artifact Signing identity validation. Microsoft documents identity validation as an Azure portal-only operation.^4^
    • Check Azure Service Health for a subscription-specific Artifact Signing or identity advisory, but the absence of an advisory does not rule out a transaction-specific failure.^8^

    References

    1. Azure Artifact Signing: Verified ID presentation fails with HTTP 504/ ...
    2. Artifact Signing FAQ
    3. Renew or delete Artifact Signing Identity Validations
    4. Quickstart: Set up Artifact Signing
    5. Send Microsoft Authenticator logs and get an incident ID
    6. Create an Azure support request
    7. Artifact Signing ID validation fails repeatedly 9afac007-6e27-4e93-84b1-34ac87fcdc90 - Microsoft Q&A
    8. Azure Service Health portal
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.