What CIBA is
CIBA means Client-Initiated Backchannel Authentication. It is an OpenID Connect flow. The client starts the flow, not the user's browser. SenseCrypt implements CIBA as a full IdP feature.
- CIBA is an OpenID Connect (OIDC) flow.
- The client starts the request in the backchannel.
- The user approves on a separate device.
How CIBA works
A backend client sends a request to SenseCrypt. SenseCrypt notifies the user's enrolled device. The user approves the request by face login. SenseCrypt then issues the tokens to the client.
- The client sends a backchannel request.
- The user gets a prompt on the device.
- The user approves by face login.
- SenseCrypt returns the tokens to the client.
What you get
CIBA suits devices and services with no browser. A backend can start a flow for a person. The person approves on a trusted, enrolled device. The approval is phishing-resistant because sign-in binds to the device.
- Use CIBA where the client has no browser.
- The user approves on a trusted, enrolled device.
- Sign-in binds to the device, so it resists phishing.
- No password or shared code to enter, so nothing to phish.
How to turn CIBA on
CIBA works alongside the other SenseCrypt standards. You use OIDC, OAuth 2.0, SAML 2.0, SCIM 2.0, and CIBA together. You register a backchannel client in SenseCrypt. You then start a request from your backend service.
- Register a backchannel client in SenseCrypt.
- Start a request from your backend service.
- Try it in a 30-day free trial, no card.
Frequently asked questions
What is CIBA authentication?
CIBA is Client-Initiated Backchannel Authentication. A backend client starts the request. The user approves it on a separate device by face login.
How does the user approve a CIBA request in SenseCrypt?
The user gets a prompt on an enrolled device. The user approves by face login. Face matching runs on-device.
Is CIBA phishing-resistant?
Yes. The approval binds to the device. You enter no password and no shared code. So a phishing page has nothing to capture or replay.
Related