50+ signals for detecting workforce fraud

Traditional perimeter defenses don't help if the attacker is already logged in. That’s why security teams are turning to workforce identity verification to gain higher identity assurance. 

To verify users, many organizations collect risk signals, which help reveal whether an identity is legitimate. Some risk signals you may already know about include device fingerprints, IP reputation, auth velocity, and geolocation anomalies. 

This guide catalogs 50+ signals you can detect across the employee life cycle to help you verify the person logging in is who you expect.