Embed identity verification on your website

Two ways to embed

Use an iframe for the simplest setup, or the script for a smarter one.

• Iframe: one tag, with allow="camera; geolocation" so the browser lets the form use the camera and the address step.
• Script: adds the iframe, resizes it to fit, and raises events on your element, including when the applicant finishes.
• Server: create a session with a secret key (POST /v1/verification-sessions) and pass its token to the page, so each visitor gets their own link.

Only your websites can show it

By default the form cannot be framed at all, except from our own site for previews. You list the websites allowed to frame it, and the page is served with a frame-ancestors policy built from that list. We also check the referring page of a framed load. A website that is not on your list sees a blank frame.

Events for your page

The form posts messages to the page that holds it: ready, started, step, received, resize and completed. Check the origin, react to completed, then read the real result from your server or from a webhook (verification_session.completed, .failed and .awaiting_funds).

Built so a public form cannot drain your wallet

The business is always the payer, and the link only carries a public flow id: the wallet is found on our server. Public forms put the cheap phone check first, limit how many applicants one connection can start in a day, include a bot trap, and email you once a day when your spend reaches an alert level you set. Nothing is capped unless you choose a daily limit.

Example

<div id="identifyorg-verify" data-flow="vf_YOUR_FLOW_ID"></div>
<script src="https://identifyorg.com/embed/verify.js" async></script>
<script>
  document.getElementById("identifyorg-verify")
    .addEventListener("identifyorg:complete", function () { /* thank the visitor */ });
</script>

Questions