Workforce Identity Fraud Prevention

From social engineering to AI-generated images and documents, organizations face escalating identity fraud threats. Even with secondary factors in place, legacy authentication no longer provides the necessary protection against account takeover (ATO) and data breaches.

Properly identifying employees, contractors, and candidates during activities where ATO risks are highest is a critical step in protecting your organization. From ensuring real identities during hiring and onboarding to establishing certainty that each credential reset request is coming from an actual employee, Daon workforce lifecycle solutions can provide the identity assurance you need.

Identify candidate identities for confident interactions
Prevent identity fraud during remote onboarding
Eliminate key account takeover vectors
Reduce cost through credential management automation
Align with current and future identity regulations and standards

Applying the Daon Identity Continuity approach to workforce identity assurance creates a seamless flow of trust across all aspects of the employee lifecycle. Designed to minimize operational efforts and maximize system security, the Daon solution covers the complete journey: from identifying potential hires to onboarding new employees, phishing-resistant authentication, risk-driven reverification, and credential revocation.

Benefits

Prevent fake employees
Gartner® predicts that by 2028, 25% of job applicants will be fake. Confidently interview and onboard remote employees with accurate identity document verification, face matching, and advanced fraud detection.

Strengthen access security
CrowdStrike reports that 80% of cyberattacks are identity-related. Prevent risks from social engineering, employee error, and generative AI data mining by integrating passwordless authentication into identity access points.

Eliminate ATO vectors
The cross-channel capabilities of Daon technology allow you to leverage biometric verification and authentication at all high-risk touchpoints, eliminating key security weaknesses.

Reduce credential management costs
Eliminate 20-50% of helpdesk tickets with biometric credentials that can’t be lost or forgotten, and automate verification workflows with the Daon platform’s strong authentication and credential reverification.

Easy integration
Integrated OIDC and API capability enables seamless connection to leading HRIS platforms, including Oracle HCM, Workday HCM, and SAP SuccessFactors.

Regulatory alignment
Be prepared for the Accountability Through Electronic Verification Act in the United States, the Economic Crime and Corporate Transparency Act in the United Kingdom, and other regulations around employee identity that are in development.

How it Works

Onboarding/Recovery with Identity Verification (IDV)
Know your employee at every touchpoint from first interaction to last, no matter where they are or which channel they use. In seconds, ID and face scans are checked for liveness, spoofing, and tampering, then the images are matched to prevent identity fraud. Physical documents undergo patented deep forensic validation, while mobile driver’s licenses (mDLs) use attestation.

Employment document management
Ingest and validate qualification documents and Right-to-Work credentials, capturing and verifying data as needed, then store them as revocable verifiable credentials.

System access with passkeys
Generated during the IDV process, employees use their laptop or mobile device to log in to company systems with face or fingerprint biometrics. Daon can increase protection with device registration and other factors for a secondary security-layer.

Step-Up authentication
For high-risk activities like adding authorized devices or payroll account changes, employees re-verify their identity using the facial biometric captured during IDV, adding an extra layer of assurance.

Account maintenance
Perform low-friction reverification on a scheduled basis while also monitoring behavioral changes, location and time anomalies, and other potential fraud signals to trigger additional reverification.

Workforce solutions are supported by the Daon TrustX platform and multiple applications:

TrustX®
Our SaaS-based platform allows for seamless integration of cross-channel identity verification, authentication, and recovery.

Learn About TrustX

xProof®
Identity verification leveraging advanced document verification and biometric matching, both protected by presentation and injection attack detection.

Learn About xProof

xAuth™
Advanced passkey integration directly from IDV workflows with device binding for improved security.

Learn About xAuth

xFace
Highly secure, server-hosted biometric facial authentication created during IDV workflows, for strong step-up authentication.

Learn About xFace

What protection does Daon offer against deepfakes?
All of the Daon face and voice biometric processes utilize presentation and injection attack detection technologies, defending your organization against deepfakes by detecting the means of inserting them into the process. We employ numerous patented and proprietary algorithms to make sure every selfie is a live person, and every document presented during verification is real, valid, and unaltered. Additional authentication layers can be applied to support deterministic or probabilistic deepfake detection as part of continuous verification.

Can Daon support organizations with multiple global locations?
Daon technology is actively deployed across 6 continents and supports numerous multilingual applications. The xProof identity verification application can process over 15,000 different ID documents from nearly every sovereign territory around the globe. New ID documents can also be added with as few as 20 samples. It supports a large number of Latin and non-Latin character languages, and the UX can be completely customized.

Will Daon’s solution work with my IAM system?
The TrustX platform leverages OIDC and API protocols to integrate with any modern IAM system.