Can anybody help me with the Artifact Signing organization validation?

Hello, David. I understand how frustrating it is to be stuck in a "loop" with identity validation, especially when you are doing exactly what the emails ask you to do. Dealing with Trusted Signing (formerly Azure Code Signing) can be tricky because the validation is handled by a third-party Certificate Authority (CA) integrated with Azure, and their systems can sometimes be very rigid.

The error "Email verification failed" usually points to a mismatch between your Microsoft Entra ID (Azure AD) identity and the Organization details provided for the certificate.

Here is a guide to troubleshoot and get that validation to "Completed" status:

1. The "Contact Email" vs. "Domain Email" Trap

The most common reason for this failure is that the email being verified does not match the Public Domain associated with the organization you are validating.

• The Rule: If you are validating "Your Company Ltd.", the email you use for verification must be on that company's domain (e.g., ******@yourcompany.com).

The Issue: If you are using a generic email (Gmail, Outlook) or an email from a different tenant/domain to click the verification links, the CA system will often flag it as "failed" even if you clicked the button.

2. Check your "Public Record" Consistency

For Organization Validation (OV), Microsoft’s partner (DigiCert or similar) checks the Legal Entity data.

Go to your Azure Portal > Trusted Signing Account > Identity Management.

Ensure the Organization Name and Address match exactly with what is on your official registration documents (like Dun & Bradstreet or your local Chamber of Commerce).

If the email verification fails, it’s often because the email address you’re using isn't listed in the official public records for that company.

3. Clear Cache and use "Incognito" for the Link

The verification links sent via email often carry heavy metadata. If you are logged into multiple Microsoft accounts in your browser, the validation can fail silently or attach to the wrong identity.

Action: When you receive the "Please complete your email verification" email, right-click the button/link, copy it, and paste it into a Private/Incognito window where no other accounts are logged in.

4. Troubleshooting the "In Progress" Status

Since your ID 3cb74489-f16d-4c23-9b66-19d65626c816 is currently "In Progress":

Check the Junk folder: Sometimes a second email is sent by the CA (not Azure) to verify your authority to sign on behalf of the company.

Domain Verification: Ensure you have added the required DNS TXT record to your domain if requested. Without this, the email verification is considered incomplete.

How to get a human to check those specific IDs

Since you have the specific Identity Validation IDs, you have a significant advantage. Because this involves sensitive identity data, only the Microsoft Support team for "Identity and Access" can see why that specific GUID failed.

Go to Help + Support in the Azure Portal.

Create a ticket under Technical > Security > Trusted Signing.

Paste both IDs (49583ae0... and 3cb74489...) and state: "The email verification status says 'Failed' despite following the link. I need a manual sync between the CA and my Azure Tenant."

Pro Tip: If your organization has a D-U-N-S Number, make sure it's included in your identity profile. It speeds up the "Organization Validation" significantly and often bypasses some of the automated email hurdles.

Don't give up—once this bridge is crossed, signing your executables becomes a seamless process!

Hello Jonathan,

First of all, thanks very much for your reply: I really appreciate it. Please, let me to comment your points one by one, just for clarification purposes.

1. The "Contact Email" vs. "Domain Email" Trap

The EMail that I use in the Azure account is a GMail EMail address. The organization that I am trying to validate is in a domain of mine, and, the EMails that I use for the organization validation are EMails of this domain of mine, not GMail or others.

I am not sure if the usage of a GMail EMail address (not for the organization to be validated, but, to the Azure account) have something to say, however, let me say that I try with an Azure account with an EMail with the same domain that I am trying to validate, and, here the problem is that I did not receive the EMail from the "au10tixservices" when they want to validate my identity.

In other words, when I try to use my domain EMail address at "au10tixservices", I never receive the "PIN" that these service must send to me. This is why I use my GMail address for this... and maybe this is the cause of the problem. I ask to my domain and hosting provider and apparently the EMails that I am trying to use are good to receive EMails, in fact, I receive the Azure first EMail (who have the link for the "au10tixservices") without problem.

2. Check your "Public Record" Consistency

Here I am not sure what to say. I am an "autónomo" (freelance registered in Spain), so, the documents that I can provide probably did not include the EMail address that I use to validate my organization: probably these documents do not include any EMail at all. So, again, maybe this can be another problem, I don't know...

3. Clear Cache and use "Incognito" for the Link

I think I already try this... without success. I say "I think" because I can't say it 100% sure, but, I think so, in fact, I try several things: I have more or less 1 month trying to validate my organization, with different Azure accounts, different EMail address, etc., etc.

4. Troubleshooting the "In Progress" Status

I never receive other EMail apart of the "au10tixservices" services from Azure and then the PIN from "au10tixservices". As I say above, my domain and hosting provided tell me that the EMails that I am trying to use have the right DNS records, and, Azure can send EMails to that address, and, I can receive EMails from other address, I mean, I only have problems to receive the "PIN" from "au10tixservices" on these EMails.

How to get a human to check those specific IDs

I am suscribed to the "Developer support" but apparently with this kind of support I cannot open tickets or do anything more than ask here for support. I have a DUNS number, provided by a Spanish company (the official one who provides DUNS for spaniards I think), but, the DUNS information did not include information about any EMail.

On the other hand, even when the last two or three times I use my NIF (Fiscal Identity Number) instead of my DUNS, the problem is always related with the EMail (apparently) and I try with my DUNS in the past, with the same "fail" result.

I appreciate your help, Jonathan, but, just today I receive the invoice for the "Artifact Signing" service from Azure,... a service that I am not using... because I cannot use... I also pay for a support... which apparently it's not enough to get help in order to use the service for what I pay... so... I am seriously considering to look for some alternatives, since I do what I can do, but it's not enough to get this working as expected.

Maybe it's my fault, maybe it's something that I am doing wrong, but, since the lack of help (please, don't missunderstand me: your response is the first one from days ago, and, even when I trully appreciate it, apparently you cannot take a look at the "IDs" of the "failed validations", etc.), I think I must look for some alternative and just say goodbye to the time and money that I already expend... for nothing...

Thanks again for your help, sir, believe me that I appreciate it, but, this simply cannot help in the sense that I just do not want to "start again" a process that I already started a half a dozen of times with the same final "fail" result.