A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation
The behavior described matches the normal “present a verifiable credential” flow, but the final callback from Verified ID back to the relying party (Artifact Signing) is not completing successfully. The QR scan and “Processing…” indicate that Microsoft Authenticator is sharing the credential, but the web app is not receiving or processing the callback.
Key points from the documented flow:
- A verified credential must already be in Microsoft Authenticator.
- The browser shows a QR code and the page text “Present your Verified ID. Scan the QR code.”
- In Authenticator:
- Open Verified IDs.
- Use the QR code icon to scan the QR.
- Select the Verifiable Credential requested.
- Tap Share to present it.
- After sharing, the browser should move from “Processing…” to a success page (for Artifact Signing: Verification Successful) and the identity validation status in the Azure portal should change to Completed after a short delay.
In the Artifact Signing individual developer flow, the documented steps are:
- Complete the AU10TIX identity verification and add the Verified ID to Microsoft Authenticator.
- Back in the browser, a QR code is shown with “Present your Verified ID. Scan the QR code.”
- Scan this QR code from Authenticator and select Verifiable Credential.
- Tap Share to share the credential with Artifact Signing.
- On success, the browser shows Verification Successful and, after a couple of minutes, the Identity Validation status in the Azure portal updates to Completed.
Given that the QR scan triggers “Processing…” and then the QR reappears, the issue is most likely on the web app / callback side rather than in Authenticator itself. The Verified ID FAQ notes that the Request Service API uses callbacks to a URL that must be reachable from the Verified ID system; if that callback cannot be reached or processed, the verification cannot complete even though the QR scan and share succeed.
Actionable checks based on the documented flows:
- Confirm the correct credential is in Authenticator
- Ensure the Verified ID that was issued during the AU10TIX flow is present in Verified IDs in Microsoft Authenticator.
- When scanning the QR on the “Present your Verified ID” page, ensure the app shows the expected credential and that Share is tapped.
- Ensure the browser session remains active
- Do not close or refresh the browser tab while it shows “Processing…”.
- Wait several minutes to allow the callback and status update.
- Verify network/callback reachability (for the Artifact Signing relying party)
- The Verified ID Request Service sends callbacks to the relying party URL. That URL must be reachable from Azure in the tenant’s region.
- If there is any network hardening (firewall, restricted inbound rules), ensure it allows traffic from AzureCloud service tags or the documented AzureCloud.region CIDR ranges so the callback from Verified ID can reach the Artifact Signing endpoint.
- Re-run the identity validation flow end-to-end
- From the Artifact Signing account in the Azure portal, open Identity validations and confirm the request status.
- If needed, create a new identity validation request and follow the documented steps again: AU10TIX verification → add Verified ID to Authenticator → scan the final “Present your Verified ID” QR → tap Share.
If, after confirming the correct credential, keeping the browser session active, and ensuring network reachability, the page still returns to the QR without completing, this indicates an issue on the Artifact Signing / Verified ID service side. In that case, opening a support ticket for the Artifact Signing resource and referencing the identity validation request that will not complete is required so support can inspect the callback and validation status.
References: