Properly Responding to a Identity Validation email

For Artifact Signing identity validation, the next steps depend on what the action email says and why previous attempts failed.

1. If the email is an email-verification link
   • Open the email sent to the primary address used in the identity validation request.
   • Select the verification link within 7 days of when it was sent.
   • If the link has already expired (older than 7 days), submit a new identity validation request; a new link can’t be resent for the same request.
2. If the email says the identity validation failed because the email wasn’t verified
   • Submit a new identity validation request.
   • Ensure the primary email address is correct, monitored, and able to receive external mail (not a distribution list).
   • When the new verification email arrives, select the link within 7 days.
3. If the email says Organization identity validation failed for other reasons
   • This means the Microsoft validation team couldn’t validate the information from the documents provided.
   • If the email or portal asks for additional documentation and you still have remaining attempts (up to 3 total), gather the requested documents and upload them exactly as instructed.
   • Ensure all details in the documents match what was entered in the identity validation request (organization name, address, etc.).
   • If all 3 attempts have been used and validation still fails, onboarding to Artifact Signing cannot proceed. In that case, delete the Artifact Signing account to avoid being billed for unused resources.
4. If the email indicates the identity validation is expiring or has expired
   • If identity validation is about to expire, follow the renewal instructions in the email/portal as soon as possible so certificate renewal and signing are not interrupted.
   • If it has already expired and certificate renewal has stopped, create a new identity validation and associate it with the affected certificate profiles to resume signing.
5. If the email says “Failed” but you never received/used the verification link
   • Create another identity validation request.
   • Use a primary email that is not a distribution list and can receive external links.
6. If the email or situation is unclear and you need help
   • Use Azure Support or Microsoft Q&A with the artifact-signing tag to get assistance with your specific identity validation case.

In summary, when the action email arrives, read the stated reason carefully and then either: click the verification link within 7 days, submit requested documents (if attempts remain), create a new identity validation request, or, if all attempts are exhausted and validation is still rejected, delete the Artifact Signing account and contact support for guidance.

References:

• Artifact Signing FAQ