OpenID Connect Provider

Biometric authentication.
Standard OIDC.

Entry is an OpenID Connect identity provider that replaces passwords with a face liveness check. Use any standard OIDC library you already know.

Read the Docs Book a Demo

Three steps to go live.

Step 01

Register a client.

Email entryidp@synapser.com with your app name and target platforms. We'll send back a client_id — and a client_secret for server-side apps.

Step 02

Configure your OIDC library.

Point any standard OIDC library at Entry's issuer URL. No proprietary SDK required — use oidc-client-ts, next-auth, AppAuth, or whatever you already know.

Step 03

Go live.

Entry runs the liveness check in its own UI. Your app receives a verified user via standard OIDC callback. No biometric data ever touches your server.

Login vs enrolment.

A standard authorize request matches a returning face. Adding prompt=create enrolls a new user. Entry tells you clearly when a face is unregistered so you can route them accordingly.

entry-flows.ts

// Returning user — face matched against stored enrolment
await auth.signinRedirect();

// New user — first-time face enrolment
await auth.signinRedirect({
  extraQueryParams: { prompt: 'create' },
});

// Unregistered face? Entry tells you clearly.
// error=access_denied, error_description=user_not_registered
// → route into the enrolment flow

Every platform.

Entry uses the standard OIDC library for each platform. If you already use OIDC, you're most of the way there.

Web — SPA

React · Vue · Svelte

oidc-client-ts

Web — Server

Next.js · Express · ASP.NET

next-auth / openid-client

iOS

Native Swift

AppAuth-iOS

Android

Native Kotlin

AppAuth-Android

React Native

Expo or bare

expo-auth-session

Flutter

All targets

flutter_appauth

Enterprise-grade security.

Biometric data never leaves Entry. Your app receives a standard OIDC token — no raw facial data, no biometric templates on your servers. Tokens are signed with RS256 via AWS KMS; no key material is ever held on the application server.

AES-256-GCMPKCE S256RS256 via AWS KMS

Biometric authentication.Standard OIDC.