Integrate Fingerprint authentication method on Azure B2C

Question

Integrate Fingerprint authentication method on Azure B2C

emmanuel hdz 80

Hi, I've conducted some research on fingerprint recognition for login purposes. However, I would like to inquire whether it is possible to integrate this method without storing any user information or data on Microsoft Entra. Currently, my custom policy does not save any user information on Microsoft Entra. In the login technical profile (user journey), I fetch an API to retrieve user information and validate if the user exists or has provided incorrect credentials. I would like to know if it's possible to integrate the fingerprint method with my current custom policy. If so, I would appreciate guidance on the process and how users will experience these steps, perhaps in a web view or another method? If implementing this process is overly complex, would it be a better option to consider a different library for my mobile app? Thanks.

Akshay-MSFT 17,951 Reputation points Microsoft Employee Moderator

2024-01-16T07:59:49.75+00:00

@emmanuel hdz
Hope you got a chance to review the action plan suggested below. Please do let me know if you have any queries in the comments section. If you don't have any further queries and the suggestion works as per your business need. Please "Accept the answer (Yes)" and "share your feedback ". This will help us and others in the community as well. Thanks, Akshay Kaushik

Accepted answer

0 additional answers

Your answer

Akshay-MSFT 17,951 Reputation points Microsoft Employee Moderator

2024-01-16T07:59:49.75+00:00

@emmanuel hdz
Hope you got a chance to review the action plan suggested below. Please do let me know if you have any queries in the comments section. If you don't have any further queries and the suggestion works as per your business need. Please "Accept the answer (Yes)" and "share your feedback ". This will help us and others in the community as well. Thanks, Akshay Kaushik

Answer 1

Pinaki Ghatak 5,600 Microsoft Employee Volunteer Moderator

Hello @emmanuel hdz Yes, it is possible to integrate fingerprint recognition for login purposes in Microsoft Entra without storing any user information. Microsoft Entra offers passwordless authentication options that integrate with Microsoft Entra ID, such as Windows Hello for Business and Microsoft Authenticator. These methods use biometric data or a PIN for authentication, which are directly tied to the user’s device, preventing access from anyone other than the owner. For integrating this with your current custom policy, you might want to look into Microsoft Entra’s API-driven provisioning. This allows you to bring identities from any source into Microsoft Entra ID. You can use your automation tool of choice to send information to Microsoft Entra API-driven provisioning. As for the user experience, a user signs into Windows using a biometric or PIN gesture. This gesture unlocks the Windows Hello for Business private key and is sent to the Cloud Authentication security support provider. The entire process is done within the device, ensuring no user data is stored in Microsoft Entra. If you find this process complex, there are alternative libraries available for integrating fingerprint recognition in mobile apps. Some open-source projects on GitHub include sourceafis-java, Fingerprint-Feature-Extraction, and fingerprint-gui. For React Native apps, you can use expo-local-authentication. You can also check out fingerprintjs and App Lock for Android apps. Please ensure to review the documentation and community support for these libraries to determine if they meet your requirements. If this answers your question?

emmanuel hdz 80 Reputation points

2024-01-13T16:35:51.2866667+00:00

Thanks for the answer. I only want the fingerprint to work on mobile apps. I came across this documentation and I'm wondering if it's possible to implement it within my custom policy with the characteristics that I have mentioned before. Link to documentation How will the user experience be if I implement that in my custom policy? Thanks
Pinaki Ghatak 5,600 Reputation points Microsoft Employee Volunteer Moderator

2024-01-13T16:47:39.4366667+00:00
Hello @emmanuel hdz Integrating fingerprint authentication in mobile apps with a custom policy is indeed possible. The Android Developers Guide provides a comprehensive tutorial on how to implement biometric login flows in your app. This includes using face recognition or fingerprint recognition. Here’s a high-level overview of the process:

Declare the types of authentication that your app supports: This can be done using the BiometricManager.Authenticators interface. You can declare the following types of authentication: BIOMETRIC_STRONG, BIOMETRIC_WEAK, and DEVICE_CREDENTIAL.

Check that biometric authentication is available: After deciding which authentication elements your app supports, check whether these elements are available.

Display the login prompt: You can use a BiometricPrompt.PromptInfo.Builder instance to display a login prompt to the user.

As for the user experience, users would be prompted to authenticate using their fingerprint when they attempt to log in. If the authentication is successful, they would be granted access; otherwise, they would be denied access. However, the specifics of this integration would depend on the capabilities of your fingerprint recognition system and how it interfaces with Microsoft Entra. It’s important to note that these are advanced features, and their implementation would require a deep understanding of Microsoft Entra’s systems and potentially significant development effort. I suggest you look into it and read up on Microsoft Entra. If implementing this process seems overly complex, you might want to consider using a different library for your mobile app. There are several open-source OAuth solutions available that might suit your needs. Some popular alternatives include Microsoft Authenticator, Twilio Authy, Cisco Duo, Yubico Security Key, and FreeOTP. These solutions offer various features, and you should choose one that best fits your specific requirements. Remember, whichever method you choose, it’s crucial to ensure the security and privacy of your users’ data. Always follow best practices for mobile app authentication. Good luck with your project! 😊

Share via

Integrate Fingerprint authentication method on Azure B2C

0 additional answers

Your answer