Entra Identity Verification

Attackers don’t break authentication.
They walk in through the gaps.

The riskiest identity moments happen at the edges: account recovery, onboarding, and helpdesk resets, where trust is weakest. AU10TIX proves real identity with government documents and biometrics.

Trusted by the world’s leading brands every day

Full Global Identity Coverage

180+ Forensic Signals Detect Fraud, Spoofing, And Deepfakes

Privacy-first credentials that live in the user’s Microsoft Authenticator

Secure every digital identity with Microsoft Entra & AU10TIX

The assurance gap

Phishing-resistant credentials only work if they’re issued to the right person.

Establish trust from day one. Restore it when access is lost.

Secure Critical Entra Workflows With Verified Identity

AU10TIX helps organizations establish identity securely during remote onboarding, restore access through self-service account recovery, and require stronger identity proof when higher assurance is needed.

Account Recovery

Detect deepfakes, synthetic identities, and coordinated fraud rings that single-session checks miss.Replace manual, high-risk recovery with secure self-service. Users re-verify their identity with government ID and biometrics, then regain access and register a new strong authentication method through Microsoft Entra.

Workforce Onboarding

Onboard employees remotely with confidence. Verify identity before first access, then move users into passkey registration to establish a phishing-resistant, high-assurance identity chain from day one.

Re-Authentication

Use an existing valid Verified ID to confirm identity again when additional assurance is needed, reducing the need to repeat full identity proofing where the Microsoft workflow supports credential presentation.

Step-Up Verification

Require stronger identity assurance before sensitive actions or access to critical applications. Microsoft Conditional Access can require identity verification when policy or risk signals call for higher assurance, routing users to the appropriate verification experience.

Why AU10TIX

Security Is In Our DNA

ISO 27001
IBETA-ISO Level 1
SOC2
TX Ramp
IBETA-ISO Level 2
ISO 27701
Kantara
IGC
PGCB
NGCB Nevada
MGCB
New Jersey Casino Control Commission

Build trust that lasts

Experience AU10TIX Identity Verification for Microsoft Entra in action.
Deploy through
the Microsoft Security Store, or

FAQ

What is Identity Verification by AU10TIX for Microsoft Entra?

Identity Verification by AU10TIX adds high-assurance identity proofing to Microsoft Entra workflows.
AU10TIX verifies the real-world person using government-issued identity documents, biometrics, liveness and fraud detection, while Microsoft Entra manages the account, authentication and access workflow.
AU10TIX proves the person. Microsoft Entra controls access.

What Microsoft Entra use case is available today?

Microsoft Entra Account Recovery is available today.
It enables an existing Entra user who has lost access to trusted authentication methods to securely re-prove their identity and recover access through a self-service workflow, reducing reliance on knowledge-based questions, manager approval or manual help desk verification.
Microsoft is also expanding verified identity into additional workforce scenarios, including onboarding and step-up verification.

How does Microsoft Entra Account Recovery with AU10TIX work?

The user starts Account Recovery in Microsoft Entra and is redirected to AU10TIX for identity proofing.
The user captures an accepted government-issued identity document and completes a selfie. AU10TIX performs document, biometric, liveness and fraud checks and, following successful verification, issues a Verified ID into Microsoft Authenticator. The user then presents the credential back to Microsoft, where Microsoft performs Face Check and account matching. Once Microsoft’s checks pass, the user can continue the recovery process and register a new approved authentication method, such as a passkey. See it in action.

Why is AU10TIX needed if we already use Microsoft Entra, MFA or passkeys?

Strong authentication only helps if the credential was issued to the right person.
Passkeys provide strong, phishing-resistant authentication, but organizations still need a reliable way to establish the real-world identity behind the credential during high-risk moments such as account recovery, first credential registration and sensitive access.
AU10TIX provides the identity-proofing layer that helps ensure the person receiving or recovering the credential is who they claim to be.

Can AU10TIX verify new employees before their first Entra sign-in?

Yes. AU10TIX can support new-hire identity verification today through custom API-based onboarding workflows, allowing organizations to verify a new employee remotely before first access.
AU10TIX performs government ID, biometric, liveness and fraud checks and can provide verified identity information to the customer’s onboarding workflow.
Microsoft is also expanding native Entra identity verification into Workforce Onboarding, bringing verified identity into the employee lifecycle and credential-registration experience.

What if an employee’s Entra name doesn’t match their legal name, or two employees have the same name in the organization?

AU10TIX verifies the identity shown on the government-issued document. Microsoft then needs to bind that verified identity to the correct Entra account.
If an employee uses a preferred or shortened name in Entra, or multiple employees have the same or similar names, organizations can use Microsoft Custom Authentication Extensions to validate additional authoritative information against an HR system such as Workday.
This can include legal name, date of birth or document-related information, allowing the organization to strengthen account matching without relying on name alone.

What fraud protections does AU10TIX provide?

AU10TIX combines multiple identity-verification and fraud-defense layers, including document authenticity and forensic analysis, biometric face matching, liveness detection, deepfake detection and injection detection.
Where enabled, Serial Fraud Monitor adds additional intelligence to help identify potential repeat, linked and coordinated fraud patterns across verification attempts.

How does AU10TIX handle data, retention and residency?

AU10TIX processes the information required to establish identity and detect fraud. Depending on the configured workflow, this may include government ID images and document-derived information, selfie and biometric data, liveness results, fraud signals and relevant session information.
Retention is configurable according to customer requirements. Verification data is retained for the configured period and then deleted. Where Serial Fraud Monitor is enabled, hashed information used for repeat-fraud detection may have a separate retention configuration.
AU10TIX also supports regionalized Microsoft Azure environments to address customer data-residency requirements. The appropriate processing region, retention settings and privacy configuration are agreed as part of the customer’s deployment and security review.

Where can Identity Verification by AU10TIX for Microsoft Entra be purchased?

The native solution is available through the Microsoft Security Store and Microsoft Marketplace.
The Microsoft Security Store provides the security-focused discovery and integration experience, while Microsoft Marketplace supports the broader Microsoft procurement and commercial process.