Prospect Resource Hub
Workforce Identity Verification

Enter your work email and access code to explore test scenarios, video walkthroughs, and evaluation tools.

Your email personalizes this session and helps us follow up with relevant resources. We don't share it with third parties.

Evaluation Kit · Confidential

Verify your workforce with precision

Everything your team needs to evaluate Incode's identity verification platform — test scenarios, video walkthroughs, integration guides, and an interactive scorecard.

99.9%
Accuracy rate
<60s
Avg. verification
190+
Countries covered
Section 01

Why this matters

Identity fraud in hiring is growing. Understanding the risk landscape helps you know exactly what you're testing for — and what's at stake if you don't.

📋 Fraud vectors

Where hiring identity fraud happens

Synthetic identities, document manipulation, deepfake interviews, and credential fraud — the attack surface in workforce hiring is broader than most HR teams realize.

⚖️ Regulatory exposure

Compliance risk you may not know you carry

I-9 compliance, FCRA obligations, state biometric privacy laws (BIPA, CIPA), and GDPR for global hiring. Penalties for non-compliance can reach seven figures.

🎯 Your most vulnerable surface

Employees are the #1 target — and your help desk is the open door

Password resets and MFA requests are the most common entry point for account takeover. Without identity verification at the reset moment, attackers don't need to breach your perimeter — they just call your help desk.

📉 Help desk burden

Credential resets are your highest-volume, lowest-value ticket

The average enterprise help desk spends 30–40% of its capacity on password and MFA resets. Incode's self-serve biometric reset eliminates the ticket entirely — without trading security for convenience.

Section 02

Complete the POC Workforce Survey

Tell us about your environment, priorities, and what success looks like for your team. Takes a few minutes and helps us tailor the evaluation to what matters most to you.

🏢
Your environment
Tell us about your IdP, HRIS, and existing identity stack
🎯
Your priorities
Help desk reduction, candidate fraud, compliance, or all three
What success looks like
Define your evaluation criteria so we can align the POC to your goals
Start survey
Section 03

Video library

Narrated walkthroughs of real test scenarios — what the system detects, why, and what happens next. Share these internally to align your team on what "pass" and "fail" look like.

1:14

Fake ID Detection

Document tamper detection, UV pattern analysis, and the expected fail state.

1:12

Selfie Deepfake Defense

How liveness detection defeats injected video attacks in real-time.

1:08

Expired ID Handling

Date validation logic, grace period rules, and fallback-to-manual flow.

2:10

DMV Face Match

Live selfie compared against the DMV record — match confidence scoring.

2:50

Government Face Match

Biometric verification matched directly against official government databases.

0:45

International ID Recognition

Cross-border document handling — 195+ countries, 13,000+ document types.

1:24

Jira Service Management

End-to-end walkthrough of the Incode + Jira Service Management integration for IT request verification.

2:20

Auth0 Integration

Connecting Incode identity verification to Auth0 for seamless workforce authentication flows.

2:20

Okta Onboarding with Incode IDV

Securely onboard employees to Okta using Incode identity verification.

2:20

Entra Self-Service Password Reset

Secure Entra self-service password reset with Incode identity verification.

Section 04

Testing the IDV experience

Structured test cases with expected outcomes. Run these during your evaluation to validate pass, fail, and edge case behavior — no guesswork required.

ScenarioDocument typeConditionExpected resultNotes
Clean baselineUS Driver's LicenseValid, good lightingPassStandard green-path verification
Expired documentUS PassportExpired 6 months agoEdgeFlags expiry — prompts retake attempt before rejection
Tampered IDState IDAltered DOB fieldFailFont inconsistency + UV pattern mismatch
Deepfake selfieInjected video replayFail3D liveness challenge defeats injection
Face mismatchUS Driver's LicenseDifferent person's selfieFailBiometric comparison below threshold
Low-light selfieUS Driver's LicensePoor ambient lightingEdgePrompts retake — does not auto-fail
Worn documentState IDFaded, partially obscuredEdgeOCR fallback + human review flag
International IDBrazilian CNHValid, standard conditionPassDemonstrates cross-border coverage
Name discrepancyPassportHyphenated vs. single surnameEdgeFuzzy match logic — configurable threshold
Section 05

Use case test scenarios

Detailed test guides for your specific identity platform. Download and run these with your team during evaluation — they cover the full range of workforce and access management scenarios for each integration.

🔷

Microsoft Entra ID

Covers conditional access, identity lifecycle, MFA registration, self-service password reset, and privileged identity management workflows integrated with Incode biometric verification.

Excel · .xlsx ~240 KB
Download Entra scenarios
🔵

Okta Workforce Identity

Covers Okta Verify, device trust, passwordless authentication, workforce re-verification, step-up MFA, and policy-driven identity assurance levels with Incode biometrics.

Excel · .xlsx ~215 KB
Download Okta scenarios
Each spreadsheet includes a prerequisites tab, step-by-step test instructions, and a results capture tab your team can fill in and share back with your Incode rep.
Section 06

Integration matrix

Incode connects natively with the platforms your workforce and recruiting teams already use — no custom middleware required.

🔵
Okta
Confirmed
🔷
Microsoft Entra
Confirmed
🟢
ServiceNow
Confirmed
🔹
JIRA
Confirmed
💬
Slack
Confirmed
🟣
PingIdentity
Confirmed
🗂️
Active Directory
Confirmed
🎫
ZenDesk
Confirmed
REST API + Webhooks — All workflows are also available via REST API with webhook support. Most engineering teams complete implementation in 1–2 sprints.
Section 07

ROI calculator

Toggle between Candidate and Workforce scenarios. Adjust the inputs to match your organization and use the outputs to build your business case internally.

Hours saved per month
Labor cost avoidance / mo.
Fraud loss prevented / mo.
Estimated total value / mo.
Forrester estimates a password reset costs an organization $70 in IT labor and lost productivity
Includes identity verification, reset, confirmation & documentation. Gartner estimates 2–30 min per reset; 10–20 min is typical per MetricNet benchmarking
83% of organizations experienced at least one ATO in 2024 (Abnormal Security). For a 10,000-person org, even 0.1% = 10 successful incidents/year at $12,000 each
Industry average cost per account takeover incident is $12,000 — source: PingIdentity
Password resets deflected / yr
Agent hours saved / yr
Password reset cost savings / yr
Fraud risk reduction / yr
Total estimated value / yr
How this works: Incode enables secure self-service password and MFA reset — employees verify their identity with a biometric face match instead of calling the help desk. This deflects the highest-volume ticket category (account lockouts and credential resets) while blocking account takeover attempts. Fewer tickets, lower fraud exposure, and faster resolution for employees.
Section 09

Evaluation scorecard

Rate each dimension as you test. Use this to consolidate feedback before your stakeholder review meeting.

Section 10

Resources

Downloadable guides to support your evaluation and rollout planning. Share these internally with HR, IT, and security stakeholders.

📋
Workforce Enrollment Guide
A guide for IT and Security teams rolling out Incode Workforce to employees. Covers best practices for selfie and ID capture, enrollment steps, and FAQs to share with end users.
PDF · 12 pages
Download guide
🔒
Welcome to Incode & Minimum Data
An employee-facing introduction to Incode Workforce — what it is, how your data is protected, and what minimum information is collected during identity verification.
PDF · 2 pages
Download guide
Section 11

Integration options

Three paths to connecting Incode to your stack — OIDC, the B2B workforce API, and the Omni Start API for candidate verification. The integration guide includes step-by-step instructions, code examples, and parameter references.

🔐
OpenID Connect
Plug Incode into your existing IdP (Okta, Entra, Ping) as a trusted identity provider. Fastest path to production.
🏢
B2B API
Match a live biometric against your workforce directory. Ideal for step-up auth and re-verification workflows.
👥
Omni Start API
Initiate candidate verification sessions directly from your ATS. Returns a session URL and fires a webhook on completion.
Open integration guide
Section 12

Frequently asked questions

The questions that come up in every procurement conversation — answered.