Face Authentication

Table of Contents


Create a new session

  • To start the Web Face Authentication session, the user must receive a link idv.ondato.com/?id=IDV_session_id (custom domain and subdomain can be used if it is configured for the application).

  • For the Mobile and Web SDKs, only the IDV session ID (without URL) is necessary as the parameter to initiate the user session.


In order to get a IDV_session_id you must call POST /v1/identity-verifications endpoint.

{ "setupId": "3fa85f64-5717-4562-b3fc-2c963f66afa6", "faceAuthentication": { "identityVerificationId": "3fa85f64-5717-4562-b3fc-2c963f66afa6" } }
  • setupId refers to face authentication flow setup

  • identityVerificationId refers to IDV session of KYC identification.


Requirements for eligible IDV sessions

  • KYC status must be approved

  • KYC must be passed with active liveness

  • IDV session must belong to the same application

  • IDV session data must not be deleted


Check session results

To check the outcome of the user's Face Authentication session (once an application callback, URL redirect with IDV session ID, or webhook is received), follow these steps:

Call GET /v1/identity-verifications/{id} endpoint with the IDV_session_id that was generated for the user’s session to get a reference to faceAuthentication resource.

... "faceAuthentication": { "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6" } ...

From the previous response, take the id of faceAuthentication to call GET /v1/face-authentications/{id}.

{ "applicationId": "3fa85f64-5717-4562-b3fc-2c963f66afa6", "createdUtc": "2023-12-27T10:00:11.054Z", "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6", "identityVerificationId": "3fa85f64-5717-4562-b3fc-2c963f66afa6", "status": "Pending" }

The status property indicates the user’s authentication result.


Flows