Web-Initiated Auth

Our mobile SDKs connect to the web experience as well, so that users authenticating via a web interface and use your mobile application for MFA authentication.


Before you can complete this part of the integration make sure you have:

  • Created a Pinn User
  • Enrolled factors like devices and palms for that given user



The Pinn SDK will return a pinnApiError if the device or biometrics that are being requested have not been enrolled.

This section will require web development for full completion.


To complete the web-initiated authentication, you'll use our scanner to connect the web and mobile session. Again, the main difference from mobile is that the web configuration decides which authentication factors are being requested. Our mobile SDK's pre-built UI flows will respond accordingly.

Refer to Auth Factors for Pinn's current offering.

let onSuccess = {
     // Success callback after scan
let onError = { error in
     // Handle error
Pinn.shared.launchQRScanner(parentViewController: self,
    onSuccess: onSuccess,
    onError: onError)

Authentication Token

A JWT ID token is returned from a successful authentication event. Be sure to validate the token on your backend for end to end security. For more detail regarding token validation refer to ID Tokens


Time to coordinate with web developers and configure Pinn.js. See the configuration of the web section for more.



We are here to help! Contact us with any development related questions at and we'll reach back in a timely manner.