Phone-Based Identity Confirmation (PBIC)

Last update:
Aug 21, 2026

Overview

PhoneBased Identity Confirmation (PBIC) is a recovery‑only identity confirmation capability within the Aikyam Identity Platform. PBIC is designed as a fallback option that is used only during account recovery flows when additional verification is required. PBIC does not affect normal sign‑in behavior and does not replace primary authentication methods.
PBIC is used across OHID and HSID to help confirm access to a phone number and evaluate its association with a user’s identity during recovery scenarios. The capability supports both self‑service recovery flows and admin‑assisted recovery workflows, depending on the tenant and use case. PBIC does not independently grant access; instead, it provides a verification outcome that is evaluated as part of broader recovery and access decision processes.

Problem context

Account recovery is a critical point in the user journey. Users may lose access to their accounts due to forgotten passwords, passkey issues, or account lockouts caused by repeated failed sign‑in attempts. In these situations:
  • Existing recovery options may be unavailable.
  • Support‑dependent recovery can increase resolution time and operational effort.
  • Identity verification must remain secure, controlled, and auditable.
PBIC addresses this need by providing a Phone‑Based Identity Confirmation option that supports secure, explainable, and recovery‑only identity verification when standard access methods are unavailable.

What PBIC does

PBIC helps confirm a user’s identity during account recovery by validating access to a phone number and evaluating its association with the user’s identity.
Key characteristics:
  • Uses a one‑time verification code delivered via SMS or voice call.
  • Performs background risk assessment before allowing recovery.
  • Applies only to account recovery flows.
  • Does not replace registration, login, or multi‑factor authentication
PBIC does not change how users authenticate during normal sign‑in and does not independently grant access.

Summary

Phone-Based Identity Confirmation (PBIC) provides a structured and secure option for account recovery using phone-based verification. By defining a clear baseline recovery flow and isolating tenant specific behavior through configuration, PBIC supports reliable recovery while minimizing user and operational confusion across the Aikyam Identity Platform.

On this page

Powered by Aikyam @2025 All rights reserved