This is an old revision of the document!



The Suprema devices can have a specific operation mode that is required for the authentication. However, there will be situations where different type of authentication modes needs to be used per different user to provide an easy way to authenticate or for higher security by forcing the users to use more credentials that the device is set to require.

How it works

Each user can have a specific authentication mode set that will provide an extra option for authentication or to overwrite the default settings of the device.

How to set a private authentication mode on user

1) Select a user from the user menu and move down to the 'Credential' menu.


2) Click the toggle button to enable the 'Private Authentication Mode'.


3) Click the 'Add' Button


4) Configure a certain authentication mode and click the 'OK' button.


5) Save the changes.

Include/Exclude Device Default Authentication Mode

In BioStar 2, there is an additional option to choose whether to include or exclude the authentication mode of the device. If this is set as 'Include', it means that the user can use the other authentication modes set on the device. If this is set as 'Exclude', then it means that the user can use only the authentication mode is set as private authentication.

Scenarios for Include Device Default Authentication Mode

1) When the device has a similar authentication mode to the private authentication mode.

Device User

In this case, when the user uses a card to authenticate, this user will need to place the card, then scan the fingerprint, and then input the PIN. The device's authentication mode will be ignored since the private authentication mode has a specific mode when authenticating with card. The user will still be able to use the fingerprint only authentication, ID + fingerprint authentication, and ID + PIN authentication. The rest of the users will be able to all authentication modes that is set on the device.

2) When the device does not have an authentication mode that is set as the private authentication mode.

Device User

In this case, all users that doesn't have a private authentication mode related to card will not be able to authenticate using a card. However, the user with the private authentication will be able to use a card for the authentication. Also, the user will still be able to use fingerprint only, ID + fingerprint, or ID + PIN.

Scenario for Exclude Device Default Authentication Mode

Device User

In this case, the user with the private authentication mode needs to place the card, then scan a finger, and then input a PIN to authenticate. However, the user will not be able to use the fingerprint only authentication.