# ID Authentication

## Overview

ID Authentication (ID Auth) provides an API based authentication mechanism for entities to validate individuals. ID Authentication is the primary mode for entities to validate an individual before providing any service.

Following are the pre-requisites for an entity to do authentication of an individual

* ID Authentication requests must come to MOSIP only via trusted parties who are white listed in MOSIP. The trusted parties are referred to as partners in MOSIP.
* The biometric devices used for authentication must be registered with MOSIP.

ID Auth allows only partners to make authentication requests. The requests are cryptographically secured and verified. A partner that captures data from a biometric device must conform to standards to ensure interoperability.

An individual is authenticated based on the following:

* Demographic data
  * name
  * date of birth
  * gender
  * address
* Biometrics
  * fingerprint
  * iris
  * face

To enhance security a second factor of authentication is supported:

* OTP based
* Static pin based
* Challenge response

To analyze and generate authentication patterns, all authentication requests are audited. These audit logs may be used to determine any frauds during authentication process.

## Detailed functionality

[ID Authentication Functionality](https://docs.mosip.io/1.1.5/modules/id-authentication/id-authentication-functionality)

## Process flow

### Demographic authentication

![](https://306789431-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M1R77ZUwR6XwtPjJIVm%2Fuploads%2Fgit-blob-d4e54976bdd5f4db0fe7204c4e8478f0b42350f2%2Fid_auth_demo_auth_flow.jpg?alt=media)

### Biometric authentication

![](https://306789431-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M1R77ZUwR6XwtPjJIVm%2Fuploads%2Fgit-blob-519dbff31f38e4cdfde784f2fdd44e4edfe3d8b5%2Fid_auth_biometric_auth_flow.jpg?alt=media)

### Multifactor authentication

![](https://306789431-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M1R77ZUwR6XwtPjJIVm%2Fuploads%2Fgit-blob-30c1e24b52cfae5242c50c77baf2ad34a212da23%2Fid_auth_multifactor_auth_flow.jpg?alt=media)

### OTP authentication

![](https://306789431-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M1R77ZUwR6XwtPjJIVm%2Fuploads%2Fgit-blob-c07e90040bf763374380532f65d981a3974adb3f%2Fid_auth_otp_auth_flow.jpg?alt=media)

### Partner and MISP authentication

![](https://306789431-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M1R77ZUwR6XwtPjJIVm%2Fuploads%2Fgit-blob-96b237a4cb02ecd22c2f85950d6c94e76af7c208%2Fid_auth_partner_auth_flow.jpg?alt=media)

### eKYC authentication

![](https://306789431-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M1R77ZUwR6XwtPjJIVm%2Fuploads%2Fgit-blob-f648cd980ebf364a1f8029d8de2df805db98959a%2Fid_auth_ekyc_service_flow.jpg?alt=media)

## Logical View

![](https://306789431-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-M1R77ZUwR6XwtPjJIVm%2Fuploads%2Fgit-blob-473af4e3cd5ff16982d4dec10b8dd0b7d0ede267%2Fid_auth_logical_view.png?alt=media)

## Services

For detailed description of ID Auth services, code and design refer to [ID authentication repo](https://github.com/mosip/id-authentication).

## Build and deploy

Refer to build and deploy instructions in [ID authentication repo](https://github.com/mosip/id-authentication).

## APIs

[ID Authentication APIs](https://docs.mosip.io/1.1.5/apis/id-authentication-apis)