KBA stands for Knowledge Base Authentication and is an IRS-compliant way to verify the identity of a user signing an 8879 electronically. You must answer all the KBA questions correctly.
Clients will be required to answer four questions. If they answer one question incorrectly, they will be given two additional questions that they must answer correctly.
Clients will have four total attempts to complete the KBA successfully. If the client fails all four KBA attempts, the agreement will be canceled and Liscio will generate an automatic comment on the task that notifies the Task Owner that the KBA was failed:
If the client successfully passes the KBA and signs the 8879 document, Liscio will provide a File Audit Report as the last page of the signed document. This will also include the KBA Authentication token:
KBA Overview
Knowledge-based authentication (KBA) is a premium second-factor authentication method that secures a high-level verification of identity. KBA is only valid for vetting the identity of US-based recipients.
The authentication process challenges the recipient to enter their first and last name in addition to their home address. The recipient may optionally enter the last four digits of their US social security number.
The information entered is used to query multiple public databases, generating a list of three to four nontrivial questions for the recipient.
Example questions:
- Select the correct house number of the address you shared with {some name}
- Which of the following aircraft have you owned
- In which of the following cities have you attended college
- From whom did you purchase the property {some address}
- Which age range matches the age of {some name}
Once the authentication is passed, the recipient is granted access to view and interact with the agreement.
If the recipient closes out the agreement for any reason before completing their action, they will have to re-authenticate.
To secure against brute force attempts to authenticate, the KBA method can be configured to cancel the agreement after a defined number of failed attempts.