What this integration does
SenseCrypt works as an external identity provider (IdP) for Microsoft Entra ID. Entra ID stays the identity platform for your apps. SenseCrypt handles the sign in by face login.
This is standards-based federation. SenseCrypt has no proprietary connector for Entra ID. SenseCrypt has no app-store listing. Entra ID trusts SenseCrypt through open standards only.
- Entra ID sends each sign in to SenseCrypt.
- The user does face login on the device.
- SenseCrypt returns a signed token or assertion to Entra ID.
- Entra ID completes the sign in for your apps.
How the standards flow works
SenseCrypt supports OpenID Connect (OIDC) and SAML 2.0. Microsoft Entra ID acts as the relying party or the service provider. You pick one standard for the trust.
SenseCrypt publishes an OIDC discovery URL. SenseCrypt also publishes a metadata file for SAML 2.0. Entra ID reads the discovery URL or the metadata file. Entra ID then trusts SenseCrypt.
- OIDC federation uses a discovery URL, PKCE, and PAR.
- SAML 2.0 federation uses a signed metadata file.
- SenseCrypt signs each token or assertion.
- Face matching runs on-device.
- SenseCrypt stores no biometric data on the server.
How you set it up
You connect Microsoft Entra ID to SenseCrypt in a few steps. You use the standard admin screens in both products. You install no custom software.
- Register Entra ID as a relying party in SenseCrypt.
- Copy the SenseCrypt discovery URL or the metadata file for SAML 2.0.
- Add SenseCrypt in Entra ID as an external identity provider (IdP).
- Map the claims to user attributes in Entra ID.
- Set a policy to route users to SenseCrypt.
- Enable SCIM 2.0 to provision users if you need it.
- Test one face login from end to end.
What you get
The integration gives your users passwordless sign in. The sign in is phishing-resistant by design. The sign in binds to the device.
- Users sign in by face login.
- Entra ID keeps your existing apps and policies.
- SenseCrypt liveness holds iBeta ISO 30107-3 certification (L1 and L2).
- SenseCrypt adds RBAC, multi-tenant isolation, and audit logs.
- You pay one dollar per user per month, flat.
- You can start with a 30-day free trial, no card.
Frequently asked questions
Does SenseCrypt use a prebuilt Entra ID connector?
No. SenseCrypt connects to Microsoft Entra ID through open standards only. You use OIDC or SAML 2.0 with metadata and a discovery URL.
Does SenseCrypt store biometric data on the server?
No. Face matching runs on-device. SenseCrypt uses patent-pending face tokenization. A face becomes a single-use face token.
Does SenseCrypt replace Microsoft Entra ID?
No. Entra ID stays your identity platform. SenseCrypt works as the external identity provider (IdP) for face login.
Can SenseCrypt provision users with Entra ID?
Yes. SenseCrypt supports SCIM 2.0. You can sync users and groups with Entra ID.
Related