This document explains how to integrate and test the biometric authentication feature for your web or mobile application. This guide assumes that you have previously integrated the Verification flow and server-side logic as explained in the Overview & Integration Guide section.

What is Biometric Authentication?

Passbase wants to build the identity layer for the internet. Biometric authentication is an important piece of the puzzle. The Biometric authentication feature allows you to verify that the end user is still the person who originally verified their identity with you.

Once your end user's root verification is approved, the user is able to re-authenticate with their unique identifier (their email address and facemap). This is useful if users start a job, approve high transactions or simply login to your app.

Integration

The biometric authentication feature must be enabled by the Passbase team. Please reach out to [email protected] to have this feature enabled for your project.

We highly recommend pre-filling the email of the end user to expedite the process, and to ensure the end user does not use a different email address creating a new root identity.

Additionally, we recommend creating logic or logging when an end user is unable to successfully complete the Biometric Authentication. Pass the handler function, onError, through the rendered component to receive an error code of "BIOMETRIC_AUTHENTICATION_FAILED" if the end user fails the Biometric Authentication.

Webhook Event

We created a new webhook, IDENTITY_AUTHENTICATED, specific to authentication. This webhook will fire when the identity is authenticated successfully.

You can test this webhook by adding the event to a new or existing webhook within the Developer Dashboard. Click here to view our webhook documentation including the configuration instructions.

Sample Response

{
  "event": "IDENTITY_AUTHENTICATED",
  "key": "a11fc1bf-45e0-4317-babf-f40ce1b71f65",
  "status": "approved",
  "created": 1589550161,
  "updated": 1605210019,
  "processed": 1589550260,
}

You can find a further description of the response values below:

Identity History

You are now able to see a timeline for each identity under the Verification History tab. You'll be able to see events like when a root identity is created or when authentication is completed or has failed. Additionally, new meta data are now available to give better insights into the verification and authentication event.

Testing

An end-user needs to create a root identity first (using a unique email address), that needs to be approved in the project. Once this verification is approved, the end-user is able to authenticate with the same email address if there are no more checks needed (proof of address, insurance card scan, etc.).

1. Create a root identity with a unique email address. If you began testing prior to enabling the biometric authentication feature, you will need to create a new root identity with a different email address.

2. Once the verification has completed processing, it must be approved in the Developer Dashboard either manually or automatically.

3. Complete second verification with the same email address used in root identity.

4. Receive IDENTITY_AUTHENTICATED webhook event.

5. Call Passbase API using server-side library to receive data points from root identity.