A multinational logistics company hires thousands of seasonal contract drivers each year through third-party staffing agencies. The security architect wants to reduce onboarding friction and manual identity-proofing while ensuring that each driver's professional credentials (commercial license validity, safety certification) can be cryptographically verified before the driver is granted access to the fleet-management app. Verification must not require the company to store copies of the underlying documents, and drivers should be able to present the same proof to partner carriers without re-verification. Which Microsoft Entra capability should the architect design into the onboarding flow?