Skip to main content

ABHA biometric authentication

PMJAY requires proof that the beneficiary was physically present.

Calls

CallMethod and pathWhat it does
Biometric auth initPOST /hcx/abha/biometric/auth/initStarts a fingerprint or iris authentication of a PMJAY beneficiary against the ABHA registry and returns the txnId the verify call needs.
Biometric auth verifyPOST /hcx/abha/biometric/auth/verifyCompletes the authentication started by Biometric auth init with the captured PID block, and returns the beneficiary's user token, valid thirty minutes.
Biometric auth refresh tokenGET /hcx/abha/biometric/auth/refresh/tokenExchanges the refresh token from Biometric auth verify for a new thirty-minute user token without a fresh capture.
Face auth initPOST /pmjay/sbxhcx/abdmproxy/abha/biometric/faceauth/initStarts a face authentication on the ABDM proxy host and returns the txnId the rest of the face flow quotes.
Face auth capture PIDPOST /pmjay/sbxhcx/abdmproxy/abha/biometric/capture/pidPolls for the face capture the patient completes in the ABHA app after scanning the QR code for the txnId from Face auth init.
Face auth verifyPOST /pmjay/sbxhcx/abdmproxy/abha/biometric/v2/auth/verifyCompletes a face authentication with the encrypted Aadhaar number, the Aadhaar-linked mobile and the txnId, and returns the beneficiary's user token.

Base URLs

EnvironmentBase URL
Sandbox.https://apisbx.abdm.gov.in

Guides that use these calls

The whole specification, with a request you can send from the page, is the ABHA biometric authentication API reference.