ID Tech Digest – December 3, 2025

Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

ServiceNow to Acquire Veza for Authorization-Centric Identity Security

ServiceNow has agreed to acquire authorization-focused identity security firm Veza, which aggregates entitlements across cloud, SaaS, and data systems to map who has access to what. ServiceNow plans to integrate Veza’s authorization intelligence into the Now Platform to unify access reviews and entitlement remediation within existing workflows. The combination is designed to reduce identity-related risk by bringing granular permission visibility and least-privilege decisions into a single operational system.

Edmonton Police Pilot Axon Facial-Recognition Body Cameras

The Edmonton Police Service is beginning a limited pilot enabling facial recognition on Axon body-worn cameras used by up to 50 officers. The system will not alert officers in real time; instead, recorded video will be processed later to match individuals with serious offenses against an EPS watchlist. Extracted images will be deleted at the end of testing, with results reviewed by oversight bodies and Alberta’s privacy commissioner before any expansion in 2026.

IRCC Pilots Digital Visitor Visas for Moroccan Travelers

Canada’s IRCC has started piloting fully digital visitor visas for selected Moroccan travelers, eliminating the need for physical counterfoil visas. The digital credential can be validated electronically by airline systems and CBSA kiosks, reducing processing time and courier requirements. The pilot targets document-fraud vulnerabilities and is part of a broader modernization effort, with potential expansion in 2026 depending on performance and privacy evaluations.

Okta Q3 FY2026: Solid Growth and a Sharper Focus on Securing AI Agents

Okta reported Q3 FY2026 revenue of 742 million dollars, up 12 percent year-over-year, with improved GAAP profitability and strong free cash flow. CEO Todd McKinnon emphasized identity’s role in governing AI agents and highlighted traction for products like Okta Identity Governance and Auth0 for AI Agents. Guidance calls for continued growth into Q4 as Okta positions identity security as a control layer for human, machine, and AI-driven workloads.

CISA Adds Actively Exploited Android Framework Bugs to KEV Catalog

CISA has added two Android Framework vulnerabilities—CVE-2025-48572 and CVE-2025-48633—to its Known Exploited Vulnerabilities catalog following signs of active attacks. The flaws enable privilege escalation and information disclosure across Android 13–16. U.S. federal agencies must patch by December 23 under Binding Operational Directive 22-01, with CISA urging private-sector operators to prioritize updates and ensure device fleets meet the December 2025 patch level.

IDEMIA Public Security and Tsuzuki Denki Team Up on Biometric Access Management in Japan

IDEMIA Public Security and Japanese ICT integrator Tsuzuki Denki have signed an MoU to co-develop biometric access management solutions for Japan. The partnership combines IDEMIA’s biometric technologies with Tsuzuki Denki’s network and cloud integration expertise to support digital-transformation use cases across regulated sectors. Both companies frame the collaboration as enabling secure, privacy-aligned deployment of biometrics in Japanese enterprises and public institutions.

Signicat and Markaaz Partner to Bring Global SMB Business Intelligence into KYB Orchestration

Signicat has partnered with Markaaz to embed Markaaz’s verified global business data—covering hundreds of millions of entities—into Signicat’s orchestration platform. The integration enhances KYB onboarding with richer firmographic data, UBO information, and continuous monitoring. The companies say the collaboration will reduce onboarding friction and strengthen AML and risk-management workflows for financial institutions working with international SMBs.

Saviynt Opens Dubai HQ to Deepen Identity Security Coverage in the Middle East

Saviynt is establishing a regional headquarters in Dubai and partnering with cybersecurity distributor StarLink to expand identity-security deployments across the Middle East. The Enterprise Identity Cloud will be targeted at regulated sectors such as banking, energy, and government as organizations adopt cloud and AI systems that increase identity complexity. The Dubai hub will provide engineering, implementation, and customer support to regional clients.

Thirdfort Uses iProov Liveness to Tackle UK Property Fraud Risk

Thirdfort has integrated iProov Dynamic Liveness into its UK legal and property-sector due-diligence platform to combat identity fraud in high-value real-estate transactions. The capability is used during biometric verification to confirm the presence of a real person and block deepfakes or injected feeds. Thirdfort says the integration supports its broader AML checks and addresses what ICAEW identifies as a significant share of UK fraud losses.

BeyondTrust and Ping Identity Offer Unified Identity Security Bundles via AWS Marketplace

BeyondTrust and Ping Identity have launched Unified Identity Security bundles sold jointly through AWS Marketplace. The offering combines BeyondTrust’s privileged-access tools with Ping Identity’s platform in a single procurement path, targeting organizations struggling with fragmented identity architectures. The companies say the bundles support Zero Trust initiatives by providing end-to-end coverage for human and non-human identities across hybrid-cloud environments.

–

By the ID Tech Editorial Team