Well I think many instances of identify verification can be handled, such as 1) government officials 2) news organizations 3) corporate/business. They set up their own federated system on their own domain. Presumably they have the same control in place for email accounts.