FIVUCSASFace & Identity Verification using Cloud-based SaaS

A production-deployed, multi-tenant biometric identity platform — one "Sign in with FIVUCSAS" button, 10 composable factors, hybrid liveness, OAuth2/OIDC, CPU-only, self-hostable.

Read the Guide

Architecture

Diagram Gallery

🔐

10 composable auth factors

Password, Email/SMS OTP, TOTP, QR, Face, Voice, Fingerprint/WebAuthn, Hardware Key, NFC document — plus passkey & approve-login. Per-tenant flows assembled by config, not code.

🧠

Hybrid liveness, no GPU

Passive PAD (MiniFASNet) + the active Biometric Puzzle (random 3–5 of 23 actions) run CPU-only on one Hetzner CX43. Sub-second face verification.

🪪

NFC document auth

ICAO 9303 chip reading (BAC, DG1/DG2, passive authentication, fail-closed) for Turkish ID cards and biometric passports.

🏢

Multi-tenant by design

Hibernate @Filter isolation, pairwise OIDC subjects, per-tenant biometric consent. One platform, infinite verification flows.

🔌

Hosted-first OIDC

Redirective OAuth2/OIDC with PKCE — integrate like "Sign in with Google" / e-Devlet. Embeddable widget for step-up MFA.

🇪🇺

KVKK / GDPR built-in

Consent-gated capture, scoped use, and full data-subject rights — export, revoke, delete — with auditable lifecycle.