Topic starter
24/06/2026 11:21 pm
TL;DR: Generative AI, multi-session fraud detection, facial biometrics and CUA visibility are changing how identity platforms are built, according to Transmit Security’s 2025 Mosaic Rewind. The deeper shift is that identity security is moving from static flows to continuously adapting controls, which raises governance demands across human IAM, fraud and non-human identity programmes.
Editorial analysis by NHI Mgmt Group, based on content published by Transmit Security: “The 2025 Mosaic Rewind: How AI, Standards and Smarter Defenses Shaped Identity Security”.
Key questions
Q: How should IAM teams govern AI-assisted identity workflows?
A: Treat AI-assisted identity workflows as governed control paths, not simple productivity tools.
Q: Why do multi-session fraud signals matter more than single-event checks?
A: Single-event checks miss repeated patterns that only become obvious across time, such as reused selfies, shared biometrics or coordinated synthetic identities.
Q: What breaks when non-human identities rely on standing access in automation workflows?
A: Standing access breaks the security model in two ways.
Practitioner guidance
- Govern adaptive identity decisions Document when AI-assisted flow logic may change the next authentication step, and require review of the signals and thresholds that trigger those changes.
- Correlate fraud signals across sessions Link biometric similarity, behavioural patterns and document traits across multiple verification events so repeated abuse is visible as one pattern.
- Separate human and automated actors Add explicit controls that distinguish a human user from a computer-using agent inside the same journey, especially where authentication and step-up logic share the same path.
Bottom line: AI-assisted identity flows turn authentication into a continuously adapting control plane, which raises the governance burden on IAM and fraud teams.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 8:09 am
Adaptive identity flows are becoming a governance problem, not just a product capability. Once identity decisions are influenced by model-driven analysis, practitioners have to care about decision traceability, boundary conditions and override logic. The control is no longer simply 'authenticate' or 'deny'; it is how the system adapts without making the access policy opaque. Teams should treat adaptive flow design as an identity governance issue.
A question worth separating out:
A: They should design authentication as a continuous journey, not a single login event. That means aligning identity proofing, risk scoring, and channel-specific controls so the same user can move across devices and support channels without redoing every step. The goal is to reduce abandonment while preserving enough assurance to block account takeover attempts.
👉 Read our full editorial: AI-assisted identity flows are reshaping fraud and access management