eSignature identity verification and authentication features
OneSpan Sign eSignature software provides the ability to verify an unknown signer's identity, authenticate known signers, and preserve evidence.
Explore the identity verification and authentication features that help confirm who you are interacting with.
Identifying unknown signers
Establish trust in first-time interactions
When your organization does not already know the signer, OneSpan Sign helps you verify who they are before they access or sign documents. AI-powered identity verification combines government-issued identity document checks, biometric verification, and liveness detection to help confirm that a real person is presenting a valid identity document and that the person is who they say they are.
- Verify identity documents
Determine whether the identity document presented by the signer is legitimate, matches the expected country and document type, and contains the identity data needed for verification and downstream processes.
AI-powered identity document verification
Validates government-issued identity documents within the signing workflow, in real time, to help determine whether a submitted document can be trusted.Government-issued ID checks
Allows signers to verify their identity using supported passports, driver's licenses, national identity cards, and other government-issued identity documents.Document type and country validation
Checks whether the uploaded identity document matches the country and document type selected for the verification workflow, helping prevent an unexpected or unsupported document from being accepted.AI-powered document authenticity checks
Analyzes document data, security characteristics, and consistency checks to help identify fraudulent, altered, or forged identity documents.Name matching
Compares the name mentioned in the eSignature transaction with the name extracted from the ID document. This helps reduce false mismatches caused by special characters, OCR inconsistencies, maiden names, married names, and other common identity-data variations.AI-powered data extraction
Identifies and extracts document attributes from submitted ID documents, such as document type, issuing country, issuing authority, issue date, expiration date, and structural characteristics to meet an organiztion's requirements or support downstream workflows..VIZ, MRZ, and 2D barcode reading
Reads and cross references identity data from the Visual Inspection Zone (VIZ), Machine Readable Zone (MRZ), and supported barcode formats to strengthen verification confidence.Multilingual OCR support
Supports optical character recognition across multiple languages, scripts, and character sets commonly found on identity documents worldwide.Global identity document coverage
Supports identity verification across more than 10,000 document types from 193 countries and territories, enabling secure digital transactions worldwide.
- Confirm the signer matches the document
OneSpan Sign’s identity verification capability uses biometric verification to verify:
1. Does the selfie match the photo on the ID document?
2. Is the selfie authentic and not spoofed?
3. Is the selfie from a photo, or is it a live person?Biometric face comparison
Compares facial characteristics captured from the signer’s video selfie with the portrait on the identity document, to assess whether both belong to the same person.Selfie-to-ID matching
Analyzes facial characteristics extracted from a selfie and ID document photo to calculate a similarity score.Biometric capture authenticity
Analyzes the biometric capture for signs of manipulation, spoofing, or synthetic media to help determine whether the submitted facial imagery is authentic.Video biometric verification
Combines biometric face comparison, authenticity analysis, and video liveness verification in a guided mobile workflow.Real-time identity match assessment
Uses biometric match scoring to help determine whether the person presenting the identity document matches the document holder.Mobile biometric capture
Allows signers to capture identity documents and biometric video from a smartphone using portrait-mode capture, without rotating the device, and QR-code handoff when moving from desktop to mobile.Identity verification embedded in the signing workflow
Initiates identity verification directly within the OneSpan Sign workflow and captures verification events and results as part of the audit trail.
- Detect fraud and impersonation
Dynamic video liveness verification, biometric analysis, and advanced fraud detection capabilities help distinguish legitimate users from deepfakes, synthetic identities, and presentation attacks.
Video liveness detection
Verifies that a live person is present during the identity verification process by analyzing a selfie video for signs of genuine human interaction and biometric authenticity.Deepfake and synthetic media detection
Analyzes biometric and liveness signals to help identify AI-generated, manipulated, or synthetically altered facial imagery during identity verification.Presentation attack detection
Detects attempts to bypass identity verification using fraudulent facial presentations, including photos, videos, screens, masks, and other spoofing techniques.Replay attack detection
Identifies attempts to use previously recorded images or videos instead of a live biometric capture during the verification process.
- Analyze biometric trust signals
Advanced biometric and AI analysis evaluates subtle, unprompted facial movements, texture, reflection, depth, and three-dimensional facial characteristics to help determine whether a real person is actively participating in the verification process. More than 30 AI algorithms analyze these biometric and liveness signals to strengthen identity assurance and help detect deepfakes, synthetic identities, and other fraudulent presentations.
Micro-movement analysis
Evaluates subtle facial movements and natural behavioral cues captured during identity verification to help distinguish live individuals from presentation attacks and other spoofing attempts.Texture, reflection, depth, and 3D analysis
Examines facial texture, light reflection patterns, depth characteristics, and three-dimensional facial features to help verify physical presence and detect fraudulent biometric presentations.Real-time movement challenge
A real-time head movement challenge is captured on video. Because the challenge is issued dynamically and changes by session, it helps provide stronger assurance than simple static or predictable gestures.30+ AI algorithms for identity assurance
Applies more than 30 AI models to analyze identity documents, biometric data, liveness signals, and fraud indicators as part of the identity verification process.
Authenticating known signers
Authenticate users with the right level of assurance
Once a signer's identity has been established, OneSpan Sign supports a broad range of authentication methods that enable organizations to verify credentials before granting access to documents. Organizations can apply the appropriate level of authentication based on transaction value, risk, regulatory requirements, channel, or signer type.
- SMS OTP
Sends a one-time verification code to a signer's phone and requires the code to be entered before access to transaction documents is granted.
- Q&A challenge questions
Presents signer-specific challenge questions configured by the sender and validates the responses before allowing access to the transaction.
- Knowledge-based authentication (KBA)
Generates real-time questions from third-party credit bureau data to validate a signer's identity before they access documents.
- FIDO passkeys
Allows repeat signers to authenticate using phishing-resistant passkeys that leverage device-based cryptographic credentials instead of passwords.
- Digital certificates
Uses digital certificates issued by trusted authorities to verify signer identity and support high-assurance electronic signature workflows.
- Smart cards
Uses certificate-based credentials stored on government-issued or enterprise smart cards to authenticate signers at the point of signing.
- Derived credentials
Supports certificate-based authentication using credentials derived from trusted identity sources and securely provisioned to a user's device.
For senders and administrators
Configure workflows, preserve evidence, and manage trust at scale
OneSpan Sign provides the tools organizations need to configure ID verification and authentication workflows, apply the right level of assurance to each transaction, and maintain a complete record of signer activity. Verification, authentication, and signing events are preserved in a unified audit trail to support compliance and reporting requirements.
- Authentication
Single sign-on (SSO) authentication
Authenticates employees through a connected identity provider, allowing organizations to leverage their existing identity and access management systems.
Adapt authentication to the use case risk level
Allows organizations to apply different authentication methods based on transaction value, use case risk level, regulatory requirements, signer type, or channel.Authentication before document access
Requires signers to complete authentication before viewing or accessing transaction documents, helping protect sensitive information and control access to the signing workflow.Authentication at the point of signing
Applies additional authentication at the time of signature capture to provide stronger identity assurance for high-value or high-risk transactions.Multi-factor authentication workflows
Combines multiple authentication factors, such as KBA and Q&A authentication, mobile devices, biometrics, digital certificates, or hardware authenticators, to strengthen transaction security and signer assurance.
- Workflow configuration
Embedded identity verification workflow
Initiates identity verification directly within the signing process and connects verification results to the same audit trail as the signed agreement.Authentication method selection by transaction type
OneSpan Sign supports the use of different authentication methods for different workflows, enabling senders to align assurance levels with specific business processes.Multi-signer support
Senders can apply identity verification and authentication methods independently to each participant in a multi-signer transaction.Branded verification & authentication experiences
In a white-labeled signing experience, the identity verification and authentication steps follow the same white-labeled branding as the rest of the signing experience.
- Evidence and audit trails
Preserve proof of signer identity, authentication, consent, and signature activity in the transaction record. This helps simplify audits while maintaining evidence for high-assurance digital agreements.
Identity verification evidence
Captures identity verification events and results, and records them as part of the transaction history for the agreement.Authentication event records
Records authentication methods, authentication outcomes, and signer access events within the transaction audit trail.Evidence summaries
Consolidates identity verification, authentication, signing, and transaction activities into a single evidence record.
- Reporting and APIs
Evidence retrieval services
Supports retrieval of verification evidence, authentication records, audit data, and transaction history for review or compliance purposes.Identity verification metadata
Captures and exposes identity verification attributes, document data, verification outcomes, and supporting transaction information.Audit and compliance reporting
Generates reporting records that help support audits, investigations, regulatory reviews, and compliance workflows.
Apply the right level of identity assurance to every eSignature workflow
Explore AI-powered identity verification and flexible authentication options.
The information on this site is for informational purposes only and does not constitute legal advice. We recommend that you seek independent professional advice. OneSpan does not accept liability for the contents of these materials.