Artifact Signing Public Organization: verification link already used after Face Check failure

There is no documented self-service method to reissue a used representative-verification link while the organization request remains In Progress, so open a private Azure Support case and ask whether Microsoft can recover the existing request or change it to a state that permits replacement.

Open the private support case

In the Azure portal:

1. Go to Help + support.
2. Select Create a support request.
3. Choose the affected subscription and Artifact Signing service/resource.
4. Describe the issue as:
   • Public Organization identity validation.
   • Representative’s Verified ID presentation returned “Face Check failed.”
   • Reopening the same link returns “No Access—this link has been used already.”
   • Portal status is Action Required, while the detail pane remains In Progress.
   • No certificate profile has been created.
5. Ask support to confirm one of these outcomes:
   • Whether the existing request and representative-verification step can be recovered or reset.
   • If recovery is unavailable, whether the request can be moved out of In Progress so it can be deleted and replaced.
6. Attach screenshots and provide the validation request ID, subscription ID, tenant ID, timestamps, and any transaction/correlation ID through the private case—not in Microsoft Q&A.

Azure Support is the documented private assistance channel for Artifact Signing identity-validation problems. The FAQ also warns that creating additional requests for the same entity while one is still in progress does not help ^1^.

Microsoft’s published documentation does not confirm that support can reissue this particular organization-representative Face Check link, so request recovery rather than assuming a reset is available.

If support confirms that replacement is required

Deletion is available only when an identity validation is not in the In Progress state. Therefore, the current request cannot yet be replaced through the documented self-service deletion flow ^2^.

After support resolves the stuck state and confirms that the request should be replaced:

1. Open the Artifact Signing account.
2. Go to Objects → Identity validations.
3. Select the failed validation and choose Delete.
4. Review the associated accounts and certificate profiles, then confirm deletion.
5. Select Organization → New Identity → Public and submit a new organization validation request ^3^.

The deleting user must have the Artifact Signing Identity Verifier role. Deletion is irreversible ^2^.

There is no certificate-profile cleanup needed in this case because none exists. Identity validations and certificate profiles are separate resources, and a completed identity validation is required before a certificate profile can be created ^4^.

Do not remove the Verified ID yet

The instruction to delete both the validation request and its associated Verified ID after Face Check failure is explicitly documented for Individual identity validation only ^1^. No published organization-specific guidance confirms whether the representative’s Verified ID must also be removed.

Keep the existing Verified ID until Azure Support confirms whether it can be reused or must be removed as part of a new organization request. Also retain the Artifact Signing account unless support determines that organization validation has definitively failed; deleting the account is broader than replacing a stuck validation request.

References

1. Artifact Signing FAQ
2. Renew or delete Artifact Signing Identity Validations
3. Quickstart: Set up Artifact Signing
4. Artifact Signing resources and roles