[pavel_lishin]

There exist services for verifying user identities; I'd offload the civilian side to that.

For government employees, that might have to be done by hand, by verifying through public records.

[CarlosD]

Thank you, for govt employees aloowing only .gov email addresses and then cross referencing public records seems like the way to go!

I'll look up some services for the civilian side.

Appreciate all the responses