Skip to main content

How to start

This guide walks a new customer from provisioning to a first validated verification. The path differs slightly depending on how the platform is deployed:

  • Hosted (SaaS) — Innovatrics runs the platform; there is nothing to install.
  • On-premises / private cloud — the platform runs on your own Kubernetes cluster.

1. Installation & environment​

Hosted (SaaS) — nothing to install. Innovatrics operates the platform and provisions your account (step 2). You will use the hosted dashboard at platform.idv.innovatrics.com.

On-premises / private cloud — Innovatrics provides a Helm-based installation for your Kubernetes cluster. Once the platform is running, your company administrator is also granted access to the admin portal (the super-admin console) where they create their own organization in step 2.

2. Create the organization and first admin​

An organization (your isolated tenant — its own configuration, data, users, and watchlists) must be created, and a first company administrator invited.

  • Hosted — an Innovatrics engineer creates your organization in the admin portal and invites your company administrator by email.
  • On-premises — your company administrator uses the admin portal (super-admin access) to create the organization and invite the first administrator.

Either way, the administrator receives an email with a one-time setup link and sets their own password — no password is issued to them directly.

note

Your organization starts in the Sandbox environment. Validate everything there first, then promote to Production — see Environments.

3. Sign in, connect SSO, and manage users​

Sign in to the dashboard with the administrator account (hosted: platform.idv.innovatrics.com; on-premises: your deployment's dashboard URL).

Then set up how your team accesses the platform, under Users & Access:

  1. Connect your SSO — link your organization's identity provider so your team signs in with corporate credentials.
  2. Import users from your SSO directory.
  3. Assign roles — Administrator, Supervisor, Operator — to each user.
Planned

Per-tenant SSO-connection configuration and bulk user import are planned and not yet available. Today, add team members by inviting them by email (each sets their own password via a setup link) and assigning their role. SSO sign-in is available where enabled for your account.

4. Validate workflows and trust factors​

Before going live, review the verification logic your organization ships with:

  • Workflows — the platform provides template workflows (e.g. onboarding, age check). Review them, clone and modify as needed, then validate and publish, under Workflow Settings.
  • Trust factors — review the Trust Factor thresholds that drive the accept / review / reject decision and adjust them to your risk appetite, under IDV Configuration.

5. Try it with the demo​

Use the demo website to run your workflows end to end and confirm the behavior before integrating.

  • Hosted — the web demo is at demo.idv.innovatrics.com.
  • On-premises — use the demo deployment included with your installation.

6. Set up integration credentials and URLs​

Finally, connect the platform to your systems under Integration Settings. The Integration area has four tabs — API interface, Webhooks, Web redirect, and No-code — kept separately per environment.

Integrating a mobile app or your own front-end (API interface tab):

  • Generate API keys — create and copy your client ID and client secret (the OAuth2 credentials your backend uses to authenticate). Generating again rotates the secret and keeps the client ID.

Receiving the results in your backend (Webhooks tab):

  • Add a webhook endpoint — the HTTPS URL the platform sends the verification results and other events to. Copy its signing secret when it is shown; it is displayed only once.

Using the hosted web redirect instead (Web redirect tab) — set the URLs users are returned to after verification:

  • Verified URL — on success.
  • Rejected URL — on a rejected result. When empty, the user goes to the Unverified URL instead.
  • Unverified URL — when the user cancels, or the verification could not be completed for a technical reason.

Platform endpoints​

The credentials are yours; the endpoints are fixed per deployment. On the Innovatrics-managed service (European SaaS) they are:

PurposeURL
Dashboardhttps://platform.idv.innovatrics.com
Token endpoint (OAuth2)https://keycloak.idv.innovatrics.com/realms/integrators/protocol/openid-connect/token
Capture & Workflow APIhttps://api.idv.innovatrics.com/bff
Customer APIhttps://api.idv.innovatrics.com/integrator
Hosted verification apphttps://client-app.idv.innovatrics.com
Demohttps://demo.idv.innovatrics.com

Sandbox and Production share these URLs — the environment follows from which credentials you authenticate with. On-premises deployments use your own hostnames with the same path structure.

warning
/bff is part of the Capture API base

The gateway routes each service on its own path lane: /bff for the Capture & Workflow API, /integrator for the Customer API. Pointing a client at the bare hostname returns a 404 that does not explain itself.

See Website Redirect for the full redirect flow, or the Integration Overview for all integration options.

See also​