ID Tech Digest – November 21, 2025

Welcome to ID Tech’s digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

IDEMIA Becomes Launch Partner for Microsoft Entra Verified ID

IDEMIA has joined Microsoft’s launch cohort for Entra Verified ID, expanding an existing collaboration that integrates IDEMIA’s document checks, face matching, and liveness detection into Microsoft’s verifiable credential ecosystem. Entra Verified ID allows organizations to issue portable digital credentials, and IDEMIA’s role provides the high-assurance identity proofing necessary for scenarios like employee onboarding and account recovery. Microsoft positions the partnership as a response to increasingly sophisticated impersonation threats, while IDEMIA sees rising demand for reusable, cross-application verification that avoids fragmented identity checks across cloud environments.

Salesforce Investigates OAuth Abuse in Gainsight App Ecosystem

Salesforce is investigating unauthorized access involving OAuth tokens linked to Gainsight applications, prompting the company to revoke active tokens and temporarily remove affected apps from the AppExchange. Gainsight says the issue stems from the external connector rather than its core platform and has engaged Mandiant to conduct a forensic review. Early attribution points to the same threat actors behind previous OAuth-targeting attacks in the Salesforce ecosystem, underscoring how compromised SaaS-to-SaaS tokens can enable data access that bypasses normal login controls. Customers using Gainsight integrations are being urged to review API logs, verify scopes, and apply stricter governance over connected apps.

Delinea Report: Identity Security Now Shapes Cyber Insurance Coverage

A new Delinea study shows identity programs now play a decisive role in cyber insurance underwriting, with 97 percent of surveyed security leaders reporting that controls like privileged access management, identity governance, and MFA materially affected premiums or coverage. Nearly half of organizations filing claims said the triggering incident involved identity compromise, reinforcing underwriters’ focus on access control maturity. The report also notes rising premiums and exclusions tied to AI-related risks, alongside a mismatch between what CISOs believe is covered and the actual limits for lost revenue or incident response. Insurers increasingly treat renewals as audits of identity posture, requiring documented controls before extending coverage.

Palma de Mallorca Switches on EU Entry/Exit Biometric System

Palma de Mallorca has activated the EU’s Entry/Exit System for non-EU travelers, replacing manual stamping with biometric enrollment through self-service kiosks capturing fingerprints and facial images. Spain’s operator AENA has deployed dozens of kiosks and booths across Palma’s arrivals hall as part of a national rollout covering eight airports, with Barcelona and Málaga next. Authorities expect longer queues during a transition period as travelers complete their initial EES registration, after which subsequent crossings should be faster. The rollout brings one of Spain’s largest tourist gateways into compliance ahead of the EU’s April 2026 deadline and expands the scope of biometric data held in the shared Schengen database.

IDEMIA Sets New Performance Mark in Latest NIST TE E1N Fingerprint Benchmark

IDEMIA reports leading accuracy and throughput in NIST’s latest FRIF TE E1N fingerprint evaluation, the first full one-to-many fingerprint benchmark since the 2012 FpVTE program. The evaluation tests matching performance on both rolled and plain fingerprints at scale, offering updated metrics for national AFIS modernization. IDEMIA says its algorithms showed top results across several categories, emphasizing gains at stringent false-match thresholds and improved matching speeds for high-volume environments such as border agencies and background-check systems. The results highlight intensified competition among AFIS suppliers as governments seek evidence-backed upgrades.

Sumsub Ties Singpass Onboarding to Deepfake Research Push in Singapore

Sumsub is adding Singpass-based onboarding for Singapore businesses while partnering with Nanyang Technological University on watermarking research aimed at limiting deepfake-based fraud. The new Singpass integration uses government-backed identity and address data to streamline KYC while reducing document uploads, yielding faster verification and higher approval rates. The research initiative focuses on embedding imperceptible signals into personal photos to make them harder to reuse in synthetic media attacks, reflecting a sharp rise in deepfake fraud in Singapore. Together, the moves show how digital identity, onboarding, and upstream anti-deepfake measures are converging.

UK Indicates National Digital ID Data Will Be Hosted Domestically

The UK government says data for its forthcoming national digital ID system will reside in cloud environments located within the country, though it has not disclosed the architecture or specific providers. The clarification renews debate about how domestic hosting intersects with vendor control, key management, and cross-border legal frameworks, given that the UK cloud market is dominated by a small number of global platforms. The digital ID program is part of wider public-sector reform and fraud-reduction efforts, and stakeholders are watching closely for upcoming decisions on sovereignty, governance, and privacy oversight.

–

By the ID Tech Editorial Team