# Mobile Biometrics

Login users with native mobile biometrics. This process relies on the device ability to leverage built-in biometric sensors. To support mobile biometrics in the app, first implement the SDK call that creates an authenticator (cryptographic key-pair) on the end-user device and then register this authenticator with Transmit. The private key remains securely stored on the device and protected by biometrics, while the public key is registered with Transmit for a given user. To authenticate, the device uses mobile biometrics to access the private key and to sign a challenge that gets verified by Transmit. Note: registration and authentication are two-step procedures that start by calling the client-side SDK provided by Transmit, and complete using these APIs.


## Servers

Sandbox environment
```
https://api.sbx.transmitsecurity.io/cis
```

US production environment
```
https://api.transmitsecurity.io/cis
```

EU production environment
```
https://api.eu.transmitsecurity.io/cis
```

CA production environment
```
https://api.ca.transmitsecurity.io/cis
```

AU production environment
```
https://api.au.transmitsecurity.io/cis
```

JP production environment
```
https://api.gasne1-ts01.transmitsecurity.io/cis
```

## Security

### bearer

Type: http
Scheme: bearer
Bearer Format: JWT

### UserAccessToken

A token returned upon end-user authentication, which provides access to resources and data for the user and app for which it was generated

Type: http
Scheme: bearer
Bearer Format: JWT

### AdminAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### ClientAccessToken

[object Object]

Type: oauth2
Token URL: /oidc/token
Scopes:

### OrgAdminAccessToken

A token returned upon B2B authentication for a user that has the organizationAdmin or organizationCreator role.

Type: oauth2
Token URL: /oidc/token
Scopes:

## Download OpenAPI description

 - [Mobile Biometrics](https://developer.transmitsecurity.com/_bundle/openapi/user/backend-mobile-biometrics.openapi.yaml)

 - [POST /v1/auth/mobile-biometrics/start](https://developer.transmitsecurity.com/openapi/user/backend-mobile-biometrics.openapi/other/nativemobilebiometricsbackendinitialize.md): Creates a challenge for the user to sign for the mobile biometrics flow.
 - [POST /v1/auth/mobile-biometrics/authenticate](https://developer.transmitsecurity.com/openapi/user/backend-mobile-biometrics.openapi/other/authenticatenativemobilebiometrics.md): Completes authentication in Transmit. Before calling this API, invoke the client-side SDK provided by Transmit to sign a challenge using the private key stored by the device, which only occurs after t
 - [POST /v1/auth/mobile-biometrics/register](https://developer.transmitsecurity.com/openapi/user/backend-mobile-biometrics.openapi/other/mobile-biometrics-registration.md): Completes mobile biometrics registration in Transmit. Before calling this API, create an authenticator (cryptographic key-pair) on the end-user's device by invoking the client-side SDK provided by Tra
 - [DELETE /v1/auth/mobile-biometrics/delete](https://developer.transmitsecurity.com/openapi/user/backend-mobile-biometrics.openapi/other/mobile-biometrics-deletion.md): Deletes mobile biometrics authenticator for a user that is currently logged in. This API must be called from the backend using the user access token. If successful, the key will be deleted for the use