Companies can now verify new hires before they create their first password, a change designed to close security gaps that artificial intelligence has made easier to exploit.
Identity checks at the first click
Specops Secure Onboarding, released by Outpost24’s identity and access management division, focuses on the moment a new employee sets up an Active Directory password. This is often the first interaction between a worker and corporate systems.
The tool replaces temporary passwords sent via email or handed off by managers. Instead, it sends a secure enrollment link. The new hire scans a government-issued ID and completes a biometric liveness check, confirming their physical presence and matching the document. No personal data remains stored after verification, the company stated.
Service-desk teams can use the same process before approving sensitive requests like password resets or account changes. Each verification is logged for audits, and the system works with platforms such as ServiceNow and Jira.
A global library of documents
The system supports over 16,000 document types from 254 countries and territories. This range helps companies hire remotely, where employees may use local IDs unfamiliar to IT teams.
Darren James, senior product manager at Specops Software, explained that the tool addresses a long-standing issue. “For years, organizations treated onboarding as an administrative process,” he said. “But stolen identities, remote hiring, and AI-enabled impersonation are changing where identity risk begins.”
Traditional onboarding prioritized speed over security. Temporary passwords, manager handoffs, and service-desk requests often assumed identity rather than verified it. As AI makes voice cloning, deepfakes, and phishing cheaper and easier, those assumptions create more risk.
Related: How Symbolism Gives Deeper Meaning to Ring Selection
A recent report found that North Korean IT worker schemes used 15,000 stolen identities to secure jobs, often through regionally hosted laptop farms. Another showed AI now assists over 82% of phishing emails, demonstrating how quickly social engineering is evolving.
These trends mean identity verification can no longer wait until after hiring. If a fake worker gains access, they might reach internal systems, customer data, or financial tools before detection.
Limitations exist. Biometric checks can be fooled by high-quality deepfakes, and government IDs can be forged. The system also depends on employees following the process—if someone skips verification or uses a stolen device, protections weaken.
Where the risk starts
The launch shows how companies now view onboarding differently. What was once a routine task is now a security concern, especially with remote work and AI-driven fraud increasing.
Specops Secure Onboarding doesn’t remove impersonation risks but moves verification earlier. By linking identity checks to password creation, it raises the barrier for attackers before they gain access.
Available to any organization using Active Directory, the tool integrates with existing IT service management platforms without major infrastructure changes. Pricing and deployment details remain undisclosed.
For frequent travelers, a small gadget can simplify security checks while keeping essentials accessible.
