Incode Joins the Auth0 Marketplace: Biometric IDV for Registration, Login, and Password Reset
Ryan Friess
•
•
Passwords have long been the default way to prove who you are online. But passwords get stolen, reset links get intercepted, and account takeovers continue to be one of the most common vectors for fraud. At Incode, we believe that your face and your actual, biometric identity, is one of the most trustworthy credentials you have.
Today, we're excited to announce our partnership with Auth0, bringing Incode's identity verification (IDV) and biometric face authentication flows directly into the Auth0 login experience through two new integrations on the Auth0 Marketplace. This partnership further strengthens the Auth0 login experience by tying account ownership to inalienable aspects of a user’s identity and thwarting sophisticated deepfake fraud.
The partnership with Auth0 introduces two new flows in the login process: one at account creation and one at password reset.
The first integration adds Incode's full IDV flow to the Auth0 login experience. When a new user logs in for the first time, they're automatically guided through a quick but thorough identity verification process, which requires a government-issued ID and a live selfie. Incode validates the document, checks for liveness, and confirms the face matches the ID in seconds.
Once complete, the verified identity is securely stored in the user's Auth0 profile, including their biometric identity ID, verification score, and timestamp. Every subsequent login can be checked against that verified identity, providing a continuous chain of trust from day one.
Key features include:
app_metadata and surfaced as a custom claim in the ID tokenThe second integration tackles one of the highest-risk moments in any authentication flow: the password reset. A traditional reset link sent to an email address proves nothing about who's actually clicking it. An attacker who has access to a user's inbox can take over an account in minutes.
Our password reset integration solves this by intercepting the Auth0 password reset flow and requiring a live face scan before the change is allowed. Because the user's biometric identity was enrolled at login, Incode can perform a precise 1:1 match, confirming the person requesting the reset is the same verified individual who created the account.
If the face doesn't match, the reset is blocked.
This integration also includes an identity substitution safeguard, in which the returned identity ID is compared against the enrolled one to ensure the same legal identity is present throughout the account lifecycle.
See Incode’s biometric IDV process in action.
Identity verification has traditionally required an incredibly heavy lift: custom integrations, separate vendor portals, and complex data flows between systems are all necessary. By bringing Incode's biometric IDV directly into Auth0 as a marketplace integration, we've made it possible for any Auth0 customer to add meaningful IDV to their login flow in a matter of minutes.
This is particularly important for industries where authentic user identity is a matter of strict compliance, such as financial services, healthcare, legal, and HR. Simply put: This partnership is a game-changer because it provides the security guarantees of biometric verification with the simplicity of a no-code Auth0 Action.
Both integrations are available now on the Auth0 Marketplace:
You'll need an Incode account and an Auth0 tenant to get started. Full installation guides are included with each integration, and our team is available to help you get set up.
Have questions? Request a demo and we’ll walk you through this new marketplace option.
%20(1).avif)
