# MFA

***

## What is FaceSign Biometric MFA?

FaceSign Biometric MFA is an advanced security solution that goes beyond the traditional login and password. It acts as a second verification barrier, requiring the user to authenticate their identity through facial biometrics before obtaining full access to their workstation or critical systems. Integrating with existing primary authentication systems, such as Active Directory (AD) or solutions like Fortinet's FAC Agent, FaceSign MFA ensures that only the legitimate user, physically present, can access protected resources.

## Authentication flow

The process is designed to be secure while remaining as seamless as possible for the user:

1. **Primary Login:** The user performs the initial login to the machine or system using their usual credentials (e.g., AD username and password).
2. **Smart Lock:** After the successful primary login, FaceSign MFA takes effect, temporarily blocking full access to the workstation or system.
3. **Biometric Authentication:** A FaceSign interface is presented, requesting that the user complete facial biometric verification.
4. **Liveness Proof (3D Liveness):** FaceSign's cutting-edge technology performs a real-time liveness check. This ensures the captured image is of a real, present person, not a photo, video, or mask, preventing sophisticated fraud attempts.
5. **Biometric Validation:** The captured facial image (after passing the liveness check) is compared with the user's previously enrolled biometric data stored in our secure database.
6. **Access Release:** If the identity is successfully confirmed (biometric match), access to the workstation or system is immediately granted. Otherwise, access remains blocked, and security alerts may be generated according to configuration.

## Key Benefits

* **Enhanced Security:** Adds a strong authentication layer based on facial biometrics, making unauthorized access extremely difficult even if primary credentials are compromised.
* **Prevention Against Credential Leakage:** Drastically minimizes risks associated with theft, phishing, or password sharing.
* **Proof of Presence:** 3D Liveness technology ensures that the authenticated user is physically present at the time of access.
* **Flexible Integration:** Designed to integrate with existing IT infrastructures, such as Active Directory and other identity management solutions.
* **User Experience:** Despite robust security, the facial verification process is quick and intuitive.
* **Compliance and Auditing:** Generates detailed authentication records, assisting in security audits and compliance.

## Cutting-Edge Technology

FaceSign Biometric MFA uses the same high-precision facial recognition engine (99.9999% accuracy in validations) and 3D Liveness technology that permeate the entire FaceSign solutions ecosystem, ensuring a world-class level of security and reliability.

## Conclusion

Implementing FaceSign Biometric MFA is an investment in the active protection of your company's digital assets. By ensuring that only biometrically authenticated users can access critical information and systems, you raise the security standard, protect against increasing threats, and demonstrate an unequivocal commitment to data protection.

***