Topic starter
24/06/2026 9:20 pm
TL;DR: Workforce identity verification is gaining traction because help desk impersonation, onboarding fraud, and deepfake-enabled hiring scams are exploiting manual recovery and verification flows, according to 1Kosmos and Gartner analyst Akif Khan. The underlying issue is that legacy identity checks assume visual documents and human review remain trustworthy enough to establish access, which no longer holds.
Editorial analysis by NHI Mgmt Group, based on content published by 1Kosmos: “Gartnerâs Right: Why Workforce Identity Verification Canât Wait”.
Key questions
Q: What breaks when identity verification is missing from help desk credential recovery processes?
A: Without verification in help desk workflows, staff may reset or reissue credentials based on weak signals, social engineering, or incomplete records.
Q: Why do weak onboarding checks create access risk in live systems?
A: Because proof that someone exists is not proof that they should control production assets.
Q: How should organisations integrate workforce identity verification into IAM processes?
A: They should connect verification outcomes directly to provisioning, access escalation, and re-verification rules so the control changes access rather than just collecting evidence.
Practitioner guidance
- Harden account recovery as a proofing event Replace email- or SMS-led recovery with a workflow that requires stronger identity verification before credentials or access are restored.
- Strengthen onboarding identity proofing Require live identity checks that bind the presenting person to government-issued evidence before provisioning workforce access.
- Separate service desk support from access restoration Limit what support agents can approve directly and force higher-risk recovery requests through a governed escalation path.
Bottom line: Workforce identity verification is being pulled into IAM because account recovery and onboarding are now high-value fraud targets.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
25/06/2026 6:30 am
Workforce identity verification is now a frontline IAM control, not a back-office convenience. The article shows that account recovery and onboarding are being targeted because they are the moments when organisations decide who becomes trusted. That makes identity proofing part of the access decision, not a separate HR or service desk process. Practitioners should treat these flows as governance points where assurance is established or lost.
A few things that frame the scale:
- Gartner predicts that by 2026, 30% of enterprises will consider identity verification solutions unreliable in isolation because of AI-driven attacks.
A question worth separating out:
Q: Should IAM teams treat workforce identity verification as part of MFA strategy?
A: Yes, but not as a substitute for MFA. Identity verification establishes who is being trusted, while MFA protects the subsequent authentication step. If proofing is weak, MFA can simply authenticate the wrong identity more securely. IAM teams should view workforce IDV as the control that makes authentication meaningful in high-risk recovery and onboarding flows.
👉 Read our full editorial: Workforce identity verification is closing help desk fraud gaps