Integrating PingOne Recognize
PingOne Advanced Identity Cloud Android
PingOne Recognize authenticates users with privacy-preserving facial biometrics. A single glance at the device camera verifies the user’s face, their device, and their genuine presence, providing multi-factor authentication in a fraction of a second.
During enrollment, the user captures their face with the device camera. The captured image is processed on the device into a cryptographic biometric template, and the image itself is discarded. No usable biometric data is stored on the device or transmitted to the PingOne Recognize service; future authentication attempts are compared against the template, not an image.
The user’s device is also registered, because authentication verifies both the face and the device.
PingOne Recognize is particularly suited to the following use cases:
-
Passwordless login: users sign in to your app or website with their face instead of a password.
-
Multi-factor authentication: replaces phishable one-time passcodes and PINs with face and device verification in a single action.
-
Step-up authentication: confirm the genuine presence of an already signed-on user before a sensitive action, such as changing personal details.
-
Payment authentication: Strong Customer Authentication and dynamic linking for payment approvals.
-
Self-service account recovery: users re-verify their identity without a call center or repeating identity verification.
You can integrate PingOne Recognize into your apps to enroll and authenticate users using facial biometrics.
Your app receives a single PingOneRecognizeCallback from the server during a journey. The callback tells your app which ceremony to run through its operationType output field:
-
ENROLL: the user is not yet enrolled; the app runs a biometric enrollment ceremony. -
AUTHENTICATE: the user is already enrolled; the app verifies the returning user’s face and device.
Based on the response from the PingOne Recognize service, the journey branches on whether to allow or deny the transaction, or perform additional mitigation.
Integrating PingOne Recognize requires one of the following servers:
-
PingOne Advanced Identity Cloud