Skip to main content

High-Level Flow

The end-to-end biometric flow is:

  1. The web app starts a biometric operation.
  2. The backend issues a signed BST.
  3. The Web SDK launches SophID Mobile or presents a QR handoff.
  4. The mobile flow completes biometric capture.
  5. The Web SDK retrieves the resulting BRT.
  6. The backend validates the BRT and completes the operation.

System Roles​

  • Web App: triggers the operation
  • Web SDK: handles browser/mobile handoff
  • SophID Mobile: collects biometric input
  • SophID Server: signs biometric results
  • Server SDK: validates result tokens and session integrity