Okta Integration with VerifEye

This guide walks you through setting up VerifEye as a generic OpenID Connect (OIDC) provider in Okta, enabling you to use VerifEye's biometric verification as an authentication factor in your Okta-managed applications.

---

Prerequisites

Before configuring Okta, ensure you have:

• Admin access to your Okta organization
• A VerifEye account and API key, and a verification configuration set up for OIDC integration (see below)
• Understanding of the OpenID Connect flow

---

Configuring the VerifEye Verification

To integrate VerifEye with Okta, you need to create a VerifEye verification configuration that will be used as the OIDC provider. Follow these steps:

You can create a new verification configuration in the VerifEye Developer Console under Verification Configurations. Make sure to note the configuration ID and API key, as you will need these for the Okta setup.

1. Basic Settings

When creating the verification configuration, set the following basic settings:

2. Verifier Configuration

For the OIDC integration, you must configure the verification configuration to include the following settings:

• Face Recognition
  • Unique Match Verification: one person can be only registered once in the system, if the same person tries to register again with a different identifier (email address), the verification will fail
  • Match Verification: one person can be registered multiple times in the system, if the same person tries to register again with a different identifier (email address), the verification will pass

Additionally you can configure other settings such as liveness detection, age or gender verification.

3. Advanced Settings

For the OIDC integration, you must also configure the following advanced settings:

• Include Signature: enabled
• Include Verification Result: enabled
• Include Custom Input Parameters: enabled
• Force Signed Input: enabled

Adding VerifEye as Generic OIDC Provider

1. Create New Identity Provider

1. Navigate to Security > Identity Providers in your Okta Admin Console
2. Click Add Identity Provider
3. Select Add OpenID Connect IdP

2. Configure Provider Settings

Configure the following basic settings:

3. Configure the Endpoints

Set the OpenID Connect endpoints depending on your VerifEye region, for example for the EU region:

---

Required Additional Settings

After creating the OIDC provider, you must configure additional authentication settings:

1. Set Up an IdP Authenticator

• Create a new authenticator that uses the VerifEye OIDC provider

2. Create or Update your App sign-on Policies

• Define your rules for when the VerifEye authentication should be triggered in your authentication policies

---

Additional Resources

For detailed configuration options and advanced settings, refer to the official Okta documentation:

• Okta OpenID Connect Identity Providers
• Configuring IdP Authenticators
• Multifactor authentication
• Authentication method chain