Device enrollment identity verification

A non-transitory computer-readable medium storing instructions that when executed by one or more processors cause the one or more processors to effectuate operations comprising:

• receiving, from a device of a user, a request to verify an identity of the user;
• receiving, from the device of the user, an initial user identifier by which a record associated with an asserted user identity is identifiable;
• obtaining, from the device of the user, one or more verification values;
• obtaining, based on the record associated with the asserted user identity, information corresponding to a verifying user having permissions to attest to the identity of the user;
• issuing, to a verifying device associated with the verifying user, a pending identity verification request corresponding to the user;
• validating the one or more verification values, and providing to the verifying device for review by the verifying user an indication that the one or more verification values have been validated;
• establishing a communication session between the verifying device and the device of the user, wherein:
• at least one attachment is detected as being uploaded by the device of the user;
• and
• at least one audio or video communication session is detected between the verifying device and the device of the user;
• receiving a selection performed by the verifying user on the verifying device to attest to the identity of the user as being the asserted user identity;
• and
• in response to receiving the selection attesting to the identity of the user, permissioning establishment of a credential on the device of the user for the asserted user identity.