Biometric

Biometric verification involves confirming an individual's unique physiological or behavioral characteristics to ensure their identity is accurately verified.

This flow supports only Mobile applications.

Prerequisites

• Download the ezto verify mobile app before proceeding with the flow.

How to Setup

1 Navigate to Workspace > Workflows, and click on the flow created for Biometric. If you need understanding in creating a workflow, refer to the step-by-step guide guide here.

2 Hover over the plus (+) symbol and select Workflow. From the list, click Biometric to add it.

3 Click on the newly added workflow, then select the General tab to customize your preferences.

Manage General

(*) Indicates an action to be mandatory.

Name	Description
Display Name*	Set a name to the workflow for easy identification.
Description	Summarize the purpose and functionality of this workflow module.
Enable	This toggle is enabled by default. When enabled, the particular workflow module begins its execution. Conversely, if disabled, the workflow module remains inactive and won't proceed.
Rule	This determines the criteria for triggering the particular workflow module. When the selected rule is evaluated, and is satisfied, the workflow proceeds as provided. If not, the workflow will not be executed. Note: If no rules are set, the workflow defaults to its standard action without any rule. For more information about the rules, refer here.

4 Then, click on the Configs tab to set the necessary configurations.

Manage Configs

(*) Indicates an action to be mandatory.

Name	Description
Allow Multi Device Registration	This configuration permits multiple devices to be registered for biometric verification under the same user's account.
Max Device Count	You can specify the maximum number of devices that a user is allowed to register, with the acceptable range for this value being between 1 and 10.
Clear Data	Removes existing data upon initiating the process, ensuring a fresh start for the new flow.
Keys*	Choose the key to enable hashing of biometric data. Only HS256 with 256-bit hashing is supported for now. Note that, changing this key will invalidate all registered biometrics, requiring users to re-register. For more information about keys, refer here.

5 After you've configured everything needed, click on SAVE.

6 Proceed to attach the workflow to the relevant application for execution. Refer to the instructions on how to attach a workflow to an application here.

Expected Result

Based on the provided configuration, the information that will be fetched for Biometric includes the following parameters:

Name	Description
biometric_device	Specifies the type of biometric device used for verification.
biometric_verified	This denotes whether the biometric data associated with the user has been successfully verified. The value will be "True" if the verification is successfully completed and "False" if it is not.
biometric_verified_at	This provides a timestamp, in Unix epoch format, indicating the exact time when the biometric data was verified. This allows you to know precisely when the event occurred.

The response received will include the accurate information mentioned above. Note that, the response values can vary depending on the specific workflow modules.

How it Works

1 Launch Postman or your preferred API tool and execute the flow by configuring the suitable Method, URL, and Body settings. If you're seeking guidance on how to perform these actions, see here.

Make sure to configure the "allow_new_device": true in the body of the respective API.

2 Upon initiating the API call, a verification request will be sent to your configured Verification Way (Mobile) settings.

3 Based on the request, execute the flow in an incognito browser and follow the prompts to complete the verification process.

4 Begin by scanning the QR code with the ezto verify mobile app and verify the Biometric.

This depends on what you have configured for the mobile notification way, i.e, QR code or Push integration. To know the difference between QR code or Push, refer here.

5 The verification process will be completed if the provided data is valid.

6 The response can differ depending on the chosen Verification Way and Notification Way configurations. To know more, see here.

7 Here is a sample response for Biometric:

{
  "workflow": "verification",
  "user_id": "mark@gmail.com",
  "request_id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx",
  "biometric_device": "{\"model\":\"motorola motorola edge 40\",\"isPhysicalDevice\":true,\"osVersion\":\"14\",\"platform\":\"Android\",\"id\":\"13654178-6e53-449d-959c-02833d4256de\"}",
  "biometric_verified": "true/false",
  "biometric_verified_at": "1719569072"
}