01
The decision in brief
The argument for several modalities is an argument about uneven workforces. Where a real group of employees cannot put a face in front of a camera, per-group modality choice outweighs everything else on this page.
Choose Veridium when
parts of your workforce need a biometric other than the face, such as staff who wear respirators or full face coverings all shift.
Choose SenseCrypt IdP when
one face-based path, with one enrollment flow, one capture path and one recovery path to operate, matters more than covering every working environment.
Side by side
| Dimension | SenseCrypt IdP | Veridium |
|---|---|---|
| What you buy | An identity provider built around a live face check | Multi-modal biometric authentication for the enterprise |
| Biometric modalities | Face only | Several, including phone-camera fingerprint capture |
| Federation | OIDC, SAML 2.0, SCIM 2.0, CIBA | SAML 2.0 for service providers, per Veridium documentation |
| List price | $1 per user per month; 20-seat minimum | Varies by plan |
What you buy
- SenseCrypt IdP
- An identity provider built around a live face check
- Veridium
- Multi-modal biometric authentication for the enterprise
Biometric modalities
- SenseCrypt IdP
- Face only
- Veridium
- Several, including phone-camera fingerprint capture
Federation
- SenseCrypt IdP
- OIDC, SAML 2.0, SCIM 2.0, CIBA
- Veridium
- SAML 2.0 for service providers, per Veridium documentation
List price
- SenseCrypt IdP
- $1 per user per month; 20-seat minimum
- Veridium
- Varies by plan
02
One biometric method or several?
Veridium supports more than one biometric, which lets an organization choose a modality per group. SenseCrypt IdP can provide authentication directly to applications or federate with an existing identity platform, and the face is the only biometric it offers.
Consider a clean room where respirators stay on all shift, or a role whose protective equipment covers the face. Where any of that describes a real group of employees, per-group modality selection is something SenseCrypt IdP cannot offer, and it is better read here than discovered halfway through a rollout.
Fewer moving parts to operate
A single modality has one enrollment flow, one capture path and one recovery path to run. Supporting many modalities means keeping many of each in working order at once.
The face is matched on the enrolled phone
For both phone methods, capture, liveness and comparison stay on the user's own phone. The browser, kiosk or shared desktop being signed in to is never enrolled.
Federate rather than migrate
Registered as an external identity provider over OIDC or SAML 2.0, SenseCrypt IdP sits behind whatever provider you run now. Directories, policies and integrated applications stay as they are.
03
Plan for the users a face cannot cover
A single-modality product has a coverage gap by construction. Some users cannot present a face reliably, some will not install an application on a personal phone, and some work where holding up a phone is not practical. SenseCrypt IdP has no end-user password fallback to absorb those cases, so plan them outside the product: issue a device, license the enterprise webcam method, which runs on secure terminals, because unsecured terminals expose webcam capture to injection attacks (it has no phone possession factor), or keep a different method for that group in the identity platform in front of SenseCrypt IdP.
Make every vendor name the group its method cannot reach, and treat an answer of nobody as a reason to keep asking.
Where does face verification run?
On a phone, or on a vendor's servers? For both of our phone methods, the comparison happens on the phone in the user's hand.
What does the server retain?
Ours: quantum-safe, sealed, biometric-free, disposable face tokens and their verifier challenges, plus ordinary identity-provider records. No face images or templates are retained in the documented phone flow.
How does account recovery work?
There is no end-user password to reset. A replacement phone is paired through a verified contact and a new device key, and the face check is still required.
04
SenseCrypt IdP at a glance
05
Frequently asked questions
Does SenseCrypt IdP support fingerprint or other biometrics?
No. The face is the only biometric, and there is no end-user password fallback behind it. That is a design decision: fewer paths mean fewer to attack and operate. If your population needs more than one modality, a multi-modal vendor is the correct answer, and we would say so on a call.
How is SenseCrypt IdP different from Veridium?
Veridium provides multi-modal biometric authentication. SenseCrypt IdP is an identity provider with one face-based sign-in, serving OIDC, OAuth 2.0, SAML 2.0, SCIM 2.0 and CIBA from the same product. It can serve applications directly or sit behind your existing identity platform.
Can we trial it against a small group first?
Yes, and it is the sensible approach. Register SenseCrypt IdP behind the provider you run now as an external identity provider, attach one group to that registration, and leave everyone else on their existing method. The thirty-day trial needs no card.