Artifact Signing organization identity validation failed – unable to complete verification

Question

Artifact Signing organization identity validation failed – unable to complete verification

Jan Boersma 0

Hello,

I am trying to complete organization identity validation for Microsoft Artifact Signing for my Dutch sole proprietorship, Hodos navigatie.

I have successfully created an Azure subscription and an Artifact Signing account in the North Europe region.

The organization identity validation initially showed "In Progress", then "Action Required", and now shows "Failed".

I received an email asking me to complete identity verification. However, when following the verification link, I was redirected to credentials.microsoft.com and received the following error:

"You need permission. You must be logged in as an authorized user of the Entra Azure tenant which was used for the enrollment application."

I am using the same Microsoft account that I used to create the Azure subscription and Artifact Signing resource. I have also assigned the "Artifact Signing Identity Verifier" role to my account.

The Azure portal's troubleshooting assistant suggests that the failure occurred during the external identity verification process (AU10TIX), rather than in the Artifact Signing resource itself.

Could you please advise:

How can I determine why my organization identity validation failed?

Could this be caused by a tenant or account mismatch during verification?

How can I restart or reopen the identity verification process without creating a new Artifact Signing account?

Is there a dedicated Microsoft support channel for resolving failed Artifact Signing identity validation?

Thank you for your assistance.

0 comments

2 answers

Your answer

Answer 1

Meha-MSFT 2,465 Microsoft Employee Moderator

this was abug that has now been fixed, are you experiencing this on oct 20th? If the link is accessed by the same email address as the primary email address you should be able to go through VID process.

Jan Boersma 0 Reputation points

2026-10-26T10:58:56.3233333+00:00

Thank you for your response.

Unfortunately, my identity validation has already failed (status: "Validation Fail").

I created my Azure subscription using ******@outlook.com, but I entered ******@janboersma.nl as the primary email address in the identity validation request.

When I tried to complete the verification, I received the error "You need permission."

Could you please advise me on how to proceed?

Should I create a new identity validation request using my Azure account email address, or is there a way to restart the existing verification?

I would prefer not to create a new Artifact Signing account.

Thank you for your help.
Tim-MSFT 10 Reputation points Microsoft Employee Moderator

2026-10-27T22:37:24.83+00:00

You will need to create a new Identity Validation.

https://learn.microsoft.com/en-us/azure/artifact-signing/faq

For Individual identity validation, I see an error - "You don't have permission to access this page".

If you see the error, it's because the email address entered in the individual identity validation request is different from the one being used to sign in to access the identity validation link. Make sure both the email addresses match.

Answer 2

Based on the described flow, the failure can be caused by a sign-in mismatch during the identity verification step.

For Artifact Signing individual identity validation, Microsoft documents state that the error "You don't have permission to access this page" occurs when the email address entered in the identity validation request is different from the email address being used to sign in to access the identity validation link. The sign-in identity and the email used in the validation request must match.

What can be done:

In the Azure portal, open the Artifact Signing account and review the failed identity validation request details.
Confirm that the Primary Email used when the organization validation was created is the same account being used to open the verification link.
If the verification email was missed or the link was not completed within seven days, start a new identity validation request. A new link cannot be resent for the same request.
If the request already shows Failed and the failure happened during the verification step, create another identity validation request. Microsoft documentation states that when email validation fails, a new identity validation request must be initiated.
Do not create multiple in-progress requests for the same entity just to speed up processing. That does not help, and requests cannot be expedited.

About reopening or restarting without a new Artifact Signing account:

A new Artifact Signing account is not required.
Identity validation is a resource under the existing Artifact Signing account, and a new identity validation request can be created there.
If the issue is specifically that the organization already has an identity validation tied to a different primary email address, support must be contacted to continue onboarding.

How to determine why it failed:

Check whether the request failed because the verification email was not completed within seven days.
Check whether the signed-in account differs from the email address entered in the validation request.
If more documentation was requested, only three upload attempts are allowed.
If the failure was not due to a missed email verification, the validation team was unable to determine the request from the submitted information.

Support channel:

Use Azure Support by creating a support ticket in the Azure portal.
Microsoft Q&A with the Artifact Signing tag is also listed as a support option.
If another identity validation is needed for the same organization with a different primary email address, support is the documented path.

References: