PingOne Recognize

PingOne Recognize is Ping Identity’s biometric authentication solution. It combines true identity assurance, proprietary liveness, privacy-preserving technology, and device-agnostic architecture to reduce fraud, improve UX, and lower authentication costs.

Features

• Native, web, and mobile browser deployments via multi-tenant cloud or self-managed software.
• Active enrollment available via a customizable screen.
• Invisible enrollment available via IDV Bridge—users are bulk-enrolled using previously verified identities.
• Multi-factor by design: face and device—for flows where the device is not shared.
• Passive liveness—no blinking or head movements.
• Certified presentation and injection attack prevention.
• <1 second authentication speed.
• Works on any device (phone, shared tablet, desktop) with a front-facing camera.
• Multiple users can share the same device, and one user can authenticate on multiple bound devices.
• Can be combined with PingOne DaVinci, PingOne Verify, and PingOne Protect for verified trust flows.

Feature Detail

Flexible Deployment & Integration

Deploy PingOne Recognize wherever it’s needed without re-architecting.

• SDKs for native mobile (iOS, Android, React and Flutter) as well as web (for desktop and mobile browsers).
• Available as multi-tenant SaaS or self-managed software.
• Deployable alongside PingOne or any third-party IdP or CIAM platform.
• Apply selectively to specific journeys (e.g., transactions or account recovery).

Risk-Based & Orchestrated Authentication

Apply biometric authentication dynamically based on context and risk.

• Integrates with Ping’s orchestration layers.
• Trigger authentication based on risk signals, behavior, and transaction context.

Deepfake-Resistant

Prevent presentation and injection attacks with layered defense.

1. When the device is not shared, both face and device are needed to authenticate; remote deepfake attacks fail without the original device.
2. Certified liveness detection stops presentation attacks by ensuring a real user is present, not a mask or deepfake.
3. Injection attack prevention checks for device compromise e.g. spoofing tools.
4. Behavioral signals detect unnatural device movement.

Privacy-Preserving Architecture

Prevent presentation and injection attacks with layered defense.

1. The mobile/web SDK captures a selfie.
2. Certified liveness and anti-injection checks are run on-device.
3. The resulting template is transformed into a Zero-Knowledge Biometric profile and sent to the PingOne Recognize server.
4. The PingOne Recognize server validates the match without storing any PII or biometric data in retrievable or reconstructable form.

Use Cases

Verified Opening

• Active enrollment: Standalone enrollment using a Ping screen
• Invisible enrollment: Eliminate user-driven enrollment. Enroll users with previously verified identities / employee images.

Verified Access

• Login & Step-Up
  • CIAM: Protect logins and critical account changes by checking both face and device against the originally verified identity.
  • Workforce & B2B: Secure employee access on any shared workstation.
• Payments: Dynamically link transactions to the amount and account details.

Verified Recovery

• Account recovery: Dramatically reduce the cost of account recovery with instant, self-service re-verification.
• Device binding: Bind new devices to existing accounts with one glance at the camera.

Shared Devices (Frontline Workers)

• Authenticate employees on any shared terminal without needing a token or unique device.

Certifications

NIST FRVT 1:1

• One of the highest commercially available Face Matching models

Evaluated Against ISO/IEC 30107–3

• Detects biometric fraud (photos, masks, videos)
• Strong protection against spoofing and ID fraud

CEN/TS 18099 Certified

• High-level certification against injection attacks

Privacy-Preserving

• No biometric data stored in retrievable or reconstructable form

Industry Recognition