Protect Entra accounts from imposters.

1. Enable secure self-service recovery for Entra accounts.

Microsoft Entra has limited options for self-service account recovery. The built in self-service password reset (SSPR) offering relies on phishable or inflexible authentication factors. Currently, Entra doesn't have any self-service MFA reset capabilities.

Self-service Entra account recovery through Nametag is a user-friendly solution that is uniquely secure against modern impersonation threats. Through Nametag, users can reset their Entra MFA and passwords all on their own, without needing to involve support.

2. Verify the identity of every new Entra user.

Recently, North Korean operatives have been infiltrating companies around the world by posing as remote IT workers. Once hired and onboarded, they funnel money back to the North Korean regime, steal company data and secrets, and deploy ransomware. Other bad actors are copying North Korea's success, creating a booming ecosystem of fake workers.

You can prevent North Korean IT workers and other bad actors from infiltrating your company by using Nametag identity verification to uncover bad actors before they can set passwords and enroll in multi-factor authentication. Entra user onboarding through Nametag prevents breaches while saving time and headaches for IT teams.

3. Use Nametag as an Entra External Authentication Method (EAM).

Microsoft allows Entra admins to use certain third-party authentication providers as the second factor in a multi-factor authentication (MFA) policy. Entra ID admins can quickly add Nametag Deepfake Defense identity verification as a flexible, ultra-secure secondary factor.  

Returning users need only scan a QR code and then take a quick selfie in order to complete MFA. It's faster and more flexible than most MFA factors, and far more secure. Use Nametag as an Entra EAM to elevate Entra account security at high-risk moments, including step-up authentication when you detect suspicious behavior or other signals.

4. Use Nametag to securely issue a Temporary Access Pass (TAP).

A Temporary Access Pass (TAP) is a time-limited passcode that can be configured for single or multiple use. It's essentially a bypass code which allows a user to sign in to Microsoft Cloud products. Because a TAP is so powerful, it's critical to know exactly who is receiving it.

Entra ID administrators can enable users to receive a TAP in a secure environment after completing Nametag identity verification. Self-service TAP issuance saves time for Entra admins while ensuring that only the intended recepient receives the TAP.