How Beyond Identity & Nametag Stop Identity Fraud at Onboarding & Recovery

Key Takeaways

• Expanded Partnership: Beyond Identity and Nametag have expanded our strategic partnership to include a commercial integration, enabling single-contract procurement.
• Threats Neutralized: Our joint solution directly combats sophisticated identity fraud, such as attacks from North Korean IT workers and social engineering tactics used by groups like Scattered Spider.
• Technical Solution: The integration uses Nametag for high-assurance identity verification (government ID + biometric matching and liveness checks) as a delegated factor during employee passkey enrollment and recovery within the Beyond Identity platform.

Introduction

As the lines blur between legitimate and fraudulent identities, securing your workforce from day zero has become paramount. Sophisticated threat actors are infiltrating organizations around the world by faking their identity during the hiring process or by manipulating your help desk to gain unauthorized access via a coerced account recovery.

This is why we are proud to announce a significant expansion of our strategic partnership with Nametag. This expansion elevates our technical integration to a full commercial partnership that makes it fast and easy for companies to directly address advanced identity threats.

What Problem Does the Beyond Identity and Nametag Integration Solve?

The primary problem this integration solves is identity fraud at the most vulnerable points of the user lifecycle: enrollment and recovery. 

Security teams, especially in sensitive industries like financial services, insurance, and AI technology, are facing unprecedented attacks from a range of sophisticated adversaries. These include state-sponsored groups, like North Korean IT workers who secure employment under false pretenses, and cybercriminal gangs like Scattered Spider (aka Scattered Lapsus$ Hunters) who use social engineering to trick help desk agents into resetting credentials for account takeover.

Our expanded partnership with Nametag bolsters account security across the entire lifecycle of a Beyond Identity device-bound passkey by ensuring that the person enrolling or recovering a Beyond Identity passkey is exactly who they claim to be. Our combined solution also unlocks new cost savings for IT departments by allowing you to spend less time on new user onboarding and enable self-service account recovery

How Does the Expanded Integration Work?

This integration works by delegating the identity verification (IDV) process to Nametag at critical, high-risk moments. When a new employee or contractor is onboarding, or when a current user needs to recover their passkey, the Beyond Identity platform triggers Nametag to perform a robust identity check. For end-users, IDV is quick and easy: 

1. The user is prompted to scan their government-issued photo ID (like a driver's license or passport), then take a selfie. Returning users need only take a selfie.
2. Nametag validates their document and selfie, then matches their selfie against the photo on their ID. 
3. Only after this high-assurance verification is successfully completed can the user proceed with enrollment or account recovery. 

Better Together: Security-First IAM Meets Security-First IDV.

Nametag is a perfect complement to Beyond Identity because both our companies are relentlessly focused on providing the highest possible levels of security and assurance. For example, the Beyond Identity platform is built to eliminate, not just reduce, identity and device-based threats. Similarly, Nametag uses the advanced security features of iOS and Android to perform cryptographic data integrity validation to proactively block injection attacks and the use of deepfakes. 

Combining our solutions adds a powerful barrier for bad actors who would enroll a passkey at onboarding or impersonate someone else to reset that user’s passkey.

What is New About This Partnership?

While the technical integration has been available since March, the new development is a full commercial integration. Based on significant market interest and feedback from our customers, we have streamlined the adoption process. 

Organizations can now procure the entire, unified solution––Beyond Identity’s Secure Access and Nametag’s workforce identity verification––under a single contract and simplified procurement process through Beyond Identity.

This simplifies the administrative burden and allows security teams to deploy a comprehensive defense against identity fraud more efficiently.

How Can I Learn More?

The best way to learn more about how this integrated solution can protect your organization is to see it in action. Download the solutions brief and book a call to get a personalized demo with our product experts.

Frequently Asked Questions (FAQ)

What specific fraud use cases does this integration address?

It primarily addresses enrollment fraud, where an attacker uses a fake or stolen identity to get hired, and help desk fraud, where social engineering is used to take over an existing account.

Is this a replacement for background checks?

No, this is a complementary control. While background checks verify a person's history, this integration verifies that the person presenting themselves for onboarding is the person they claim to be, in real-time.

How does this improve the user experience?

By providing a secure, self-service option for identity verification, it streamlines the onboarding and recovery processes, reducing the user's reliance on manual help desk support and getting them productive faster.