Methods and apparatus involve attestation of items, such as user profiles, roles, assets, etc. In a computing environment, a compliance administrator initiates an attestation process, including specifying particular attributes of a user that require attestation. A workflow is launched to present the user with a workflow form in a browser page of his computing device. As part of the launch, a UI control makes calls to an attestation service to determine which attributes of the user were specified by the compliance administrator and to query an association between each of the specified attributes and a particular UI control and field value therefor. Upon obtaining the results, the particular UI control for the specified attributes are presented to the user in the workflow form, along with an attestation question UI control, and an option for the user to update at least one of their field values.