Beyond Identity integration

Beyond Identity provides phishing-resistant, passwordless authentication and device trust. Pairing it with Nametag adds a strong, verifiable answer to “is this really the right person?” at the highest-risk moments — enrolling a new device, recovering access, or stepping up before a sensitive action — by verifying a government-issued ID and a real-time selfie rather than relying on a knowledge-based check or a help-desk call.

How it works

Nametag verifies the identity of the person and confirms that they match an existing account in one of your connected directories before a privileged Beyond Identity operation proceeds. The typical pattern is:

• A user needs to enroll, re-enroll, or recover access.
• The user is directed to Nametag to verify their identity with a government-issued ID and biometric verification.
• Nametag confirms the verified identity belongs to the expected account.
• The Beyond Identity flow continues, now backed by a high-assurance proof of identity.

Because the Nametag verification result is available over OpenID Connect (OIDC) and the Nametag API, it can be inserted into Beyond Identity access policies and recovery workflows.

Availability

This integration is configured together with the Nametag team so it fits your Beyond Identity deployment. To get started, contact your Nametag representative or email help@nametag.co.

Building a custom flow yourself? The Nametag API reference and Browser SDK let you trigger verification and consume the result from any application.