facial recognition feature

223 views
Skip to first unread message

Hua Yao

unread,
Apr 4, 2021, 11:10:43 PM4/4/21
to Keycloak User
Hi team, 

may I know if Keycloak support facial recognition authentication at this moment? thanks 

Garth

unread,
Apr 5, 2021, 10:56:13 AM4/5/21
to 'Thomas Darimont' via Keycloak User
It should be possible to use Apple’s FaceID via webauthn. Although, I haven’t tried it yet.

Also, there is a commercial product based on Keycloak called XiX https://getxix.com/
> --
> You received this message because you are subscribed to the Google
> Groups "Keycloak User" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to keycloak-use...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/keycloak-user/7e73a8e7-dbe1-4579-982f-935fb1cc1825n%40googlegroups.com <https://groups.google.com/d/msgid/keycloak-user/7e73a8e7-dbe1-4579-982f-935fb1cc1825n%40googlegroups.com?utm_medium=email&utm_source=footer>.

Ionel GARDAIS

unread,
Apr 5, 2021, 11:29:55 AM4/5/21
to Garth, keycloak-user
Apple's WebAuthn with Keycloak fails at the moment.

> There seem to be 2 explanations for this :
> - Safari requires auth to be triggered by a user interaction, not directly onload() as currently
> - the signature counter is not incremented by the integrated WebAuthn device representing TouchID
>
> The first issue can be worked-around by adjusting the webauthn login page to add a button to be clicked for the auth process to be triggered.
> However, it would allow to register the TouchID device but you would then hit the second issue and subsequent logins would fail.


--
Ionel GARDAIS
Tech'Advantage CIO - IT Team manager

----- Mail original -----
De: "Garth" <ga...@tunnel19.com>
À: "keycloak-user" <keyclo...@googlegroups.com>
Envoyé: Lundi 5 Avril 2021 16:56:08
Objet: [*EXT*] Re: [keycloak-user] facial recognition feature
To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/5153528f-779f-4ec9-a81e-f26d60372173%40www.fastmail.com.
--
232 avenue Napoleon BONAPARTE 92500 RUEIL MALMAISON
Capital EUR 219 300,00 - RCS Nanterre B 408 832 301 - TVA FR 09 408 832 301

Thomas Darimont

unread,
Apr 5, 2021, 12:50:48 PM4/5/21
to Ionel GARDAIS, Garth, keycloak-user
Interesting topic!

What's your use-case for using facial authentication as a biometric factor?

I've been playing with a combination of browser based face-detection and server based face-recognition to select the user for authentication (based on picture or video). As next step the user is authenticated via password / webauthn or another factor.


Cheers,
Thomas

Garth

unread,
Apr 5, 2021, 4:58:35 PM4/5/21
to Thomas Darimont, Ionel GARDAIS, 'Thomas Darimont' via Keycloak User
Very cool. What are you using for your face-recognition backend?
> > > an email to keycloak-use...@googlegroups.com <mailto:keycloak-user%2Bunsu...@googlegroups.com>.
> > > To view this discussion on the web visit
> > > https://groups.google.com/d/msgid/keycloak-user/7e73a8e7-dbe1-4579-982f-935fb1cc1825n%40googlegroups.com <https://groups.google.com/d/msgid/keycloak-user/7e73a8e7-dbe1-4579-982f-935fb1cc1825n%40googlegroups.com?utm_medium=email&utm_source=footer>.
> >
> > --
> > You received this message because you are subscribed to the Google Groups "Keycloak User" group.
> > To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com <mailto:keycloak-user%2Bunsu...@googlegroups.com>.
> > To view this discussion on the web visit https://groups.google.com/d/msgid/keycloak-user/5153528f-779f-4ec9-a81e-f26d60372173%40www.fastmail.com.
> > --
> > 232 avenue Napoleon BONAPARTE 92500 RUEIL MALMAISON
> > Capital EUR 219 300,00 - RCS Nanterre B 408 832 301 - TVA FR 09 408 832 301
> >
> > --
> > You received this message because you are subscribed to the Google Groups "Keycloak User" group.
> > To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com <mailto:keycloak-user%2Bunsu...@googlegroups.com>.

Thomas Darimont

unread,
Apr 6, 2021, 5:12:36 AM4/6/21
to Garth, Ionel GARDAIS, 'Thomas Darimont' via Keycloak User
Nothing too fancy for the demo, just face-api.js in the browser to do face-detection to create images / videos and the python face-recognition library to perform the face_recognition based on images / video frames.
The models can be swapped with more sophisticated ones if necessary. On the server side one can perform all sorts of additional checks (liveness detection, "video playback-detection", etc.).

Cheers,
Thomas
Reply all
Reply to author
Forward
0 new messages