Overview

iProov OIDC Web is a hosted OpenID Provider (OP) where logging in is a live face verification in the browser. You integrate it with the same OpenID Connect (OIDC) libraries you already use for "Sign in with Google". Your users need no app, no password, and no enrollment step — a browser with a camera is enough.

The difference is what the login means. A conventional identity provider proves the user knew a password, perhaps backed by a one-time code. With OIDC Web, a successful login proves a live person was present at the camera at the moment of authentication.

Depending on the mode you choose (see Authentication Modes), the login can also prove who that person is. OIDC Web matches the face against earlier logins for that identifier, or against a reference photo you provide.

For your application, the integration is a drop-in change. You send an OIDC authorization request and read the claims in the ID token you get back. You do not build or operate any biometric capture or liveness-detection technology yourself. OIDC Web performs the verification and hands you back a signed assertion of the result through the standard OIDC channels.

In one sentence: OIDC Web is an OpenID Provider where the login is a live face verification in the browser, delivered over plain OpenID Connect.

OIDC Web is the technology behind iProov Workforce MFA (see First-Factor and Second-Factor Authentication). That packaged product adds face verification as a phishing-resistant second factor to enterprise identity and access management (IAM) systems.