DigitalPersona Identity Provider

The DigitalPersona LDS Identity Provider (IdP) supports modern authentication and federation across a wide range of applications and services.

It implements the OpenID Connect, WS‑Federation, and SAML2P protocols, allowing a wide range of clients to integrate according to their architecture and security needs.

  • The DigitalPersona LDS IdP is built on the open‑source Thinktecture Identity Provider 3 platform, which provides native support for OpenID Connect

    This allows the system to act as an OIDC authority that can issue tokens, manage authorization flows, and support modern application authentication.

  • WS‑Federation functionality is provided through the Thinktecture WS‑Federation plugin

    This extends the platform for use with enterprise and legacy applications that still rely on this protocol.

  • SAML2P support is delivered through SATOSA, an open‑source proxy framework

    SATOSA allows the IdP to operate as a SAML identity provider for services that depend on SAML‑based federation.

The DigitalPersona LDS Identity Provider can be hosted on‑premises or on cloud‑based virtual machines. It runs on Microsoft Windows Server with Internet Information Services (IIS).

Authentication is performed through the DigitalPersona LDS Web Access Management services, which support the full range of DigitalPersona LDS credentials, including fingerprints, smart cards, passkeys, and other authentication factors.

DigitalPersona LDS Identity Provider Overview

All clients that integrate with the DigitalPersona LDS Identity Provider must be registered so their authentication behavior is controlled through explicit configuration. Each client has its own authentication policy, allowing administrators to define the required credentials, authentication flows, and security settings for each application or tenant.

The DigitalPersona LDS Identity Provider supports essential identity lifecycle operations, including logon, logout, and password recovery. It also offers customizable branding options, enabling each customer to tailor the user experience to their needs.

See also:

DigitalPersona Identity Provider