Salesforce Identity Verification: KYC Directly Inside Your CRM

Why Identity Verification Belongs Inside Salesforce

Your sales and compliance teams already live in Salesforce. Your leads, contacts, accounts, and opportunities are all there. So why should identity verification happen in a completely separate tool?

Every time someone has to leave Salesforce to verify an identity — switching to another platform, copying session IDs, manually updating records — you're adding friction, creating data gaps, and wasting time that should go toward closing deals or ensuring compliance.

Didit's Salesforce managed package puts identity verification where it belongs: directly on Contact and Lead record pages, with automatic status updates, webhook-driven results, and full audit trails — all without leaving your CRM.

What You Get with Didit for Salesforce

Didit's Salesforce integration adds a Lightning component to Contact and Lead record pages that lets your team verify identities with one click:

• Document verification — 14,000+ document types across 220+ countries
• Biometric liveness detection — real-time face matching with anti-spoofing technology
• AML screening — automated checks against 1,000+ global sanctions and watchlists
• Automatic record updates — verification status, document type, expiry date, and AML results are written directly to the Salesforce record
• Full audit trail — every verification session creates a Didit_Verification__c child record with document number, issuing country, face match score, liveness score, and more

How to Install and Configure

Step 1: Install the Managed Package

Install the package directly into your Salesforce org using the install link. Select "Install for all users" and click Install.

Step 2: Get Your Didit Credentials

From business.didit.me:

1. Copy your API Key from Settings > API & Webhooks
2. Copy your Workflow ID from the Workflows page

Step 3: Configure Didit Settings in Salesforce

Open the App Launcher, search for "Didit", and fill in the Settings tab:

Field	What It Does
Mode	api (recommended) or unilink
API Key	Your Didit API key
Workflow ID	Your verification workflow ID
Webhook Secret	For automatic result updates (see webhook setup below)
Display Mode	modal (popup) or embedded (inline)
Vendor Data	Links verification to the Salesforce record ID
Auto Send Contact Data	Prefills verification with record data
Language	Language for the verification UI

Step 4: Add the Component to Record Pages

1. Navigate to any Contact or Lead record
2. Click the gear icon > Edit Page
3. In Lightning App Builder, drag "Didit Identity Verification" from the Components panel
4. Click Save and Activate as Org Default

Your team can now verify identities directly from any Contact or Lead record.

Automatic Verification Updates with Webhooks

The real power of Didit's Salesforce integration is automatic result updates. When you set up webhooks, verification results flow back into Salesforce without any manual intervention.

What Gets Updated Automatically

On every verification:

• Verification Status — Approved, Declined, In Review, In Progress, or Abandoned
• Identity Verified — boolean flag (true/false)
• Verified At — timestamp of the approved result
• Didit Session ID — the session UUID for reference

When features are part of the workflow:

• Verified Document Type — passport, ID card, driver's license, etc.
• Document Expiry Date — for re-verification scheduling
• AML Check Status — clean, hit, or pending
• Verification Decline Reasons — specific reasons for failed verifications

Webhook Setup (One-Time Configuration)

1. Create a Salesforce Site: Go to Setup > Sites, register your domain, create a new site named "DiditWebhook"
2. Grant guest user access: Add DiditWebhookReceiver to the Enabled Apex Class Access
3. Configure in Didit Console: Set the webhook URL to your site's endpoint and copy the webhook secret
4. Save the secret in Salesforce: Paste the webhook secret into Didit Settings

Once configured, every verification result automatically updates the Contact or Lead record in real time.

Flow Automation

Didit includes an Invocable Action for Salesforce Flow Builder, opening up powerful automation possibilities:

Automatic verification requests: Create a flow that triggers when a new Lead is created, automatically sending a verification link to the lead's email.

Document expiry monitoring: Build a Scheduled Flow that checks Document Expiry Date across all verified contacts and triggers re-verification 90 days before expiry.

Conditional record routing: Route leads to different queues based on their verification status — verified leads go to sales, unverified leads get a verification request first.

Compliance workflows: Automatically flag contacts whose AML screening returns a hit, creating a task for your compliance team.

Use Cases by Industry

Financial Services

Verify the identity of leads and contacts before onboarding them as clients. AML screening results are stored directly on the record, giving compliance teams instant visibility.

Insurance

Verify policyholder identities at the point of sale. Document expiry tracking ensures re-verification happens before policies renew.

Real Estate

Verify buyer and seller identities as part of your due diligence process. The full audit trail in Didit_Verification__c records satisfies regulatory documentation requirements.

Healthcare

Verify patient identities in a HIPAA-conscious way. Didit processes verification data in its own infrastructure — Salesforce only stores the result and status, not the sensitive biometric data.

Professional Services

Law firms, accounting firms, and consultancies can verify client identities as part of their KYC obligations under anti-money laundering regulations.

Why Didit for Salesforce?

Native integration: Not an iframe to an external portal. A Lightning component that lives on your record pages and writes results directly to Salesforce fields.

Unbeatable pricing: $0.30 per verification with 500 free checks per month. No minimums, no contracts. Competitors charge 5-16x more.

Global coverage: 220+ countries, 14,000+ document types, 48+ languages. Verify anyone, anywhere.

Full audit trail: Every session creates a detailed child record with document number, issuing country, biometric scores, and AML results.

Flow-ready: Invocable actions let you build automated verification workflows without code.

Enterprise security: API keys are stored and processed server-side via Apex. Remote Site Settings ensure secure communication. Webhook signatures are validated with HMAC.

Get Started

1. Install the managed package
2. Create your free Didit account
3. Configure your credentials and add the component to record pages

Identity verification shouldn't live in a separate tab. It should be part of your CRM workflow — where your team already works.