Sign in with Aadhaar
Reference pattern (not natively supported)
Aadhaar is not natively supported by Ory — UIDAI restricts direct API access to licensed ASA/AUA entities. Integration goes through a licensed eKYC provider that brokers UIDAI access. Reference: ory/integrates/government-identity/aadhaar.
Aadhaar is a UIDAI-administered biometric identity used by more than 1.3 billion Indian residents. UIDAI restricts direct API access to licensed entities, so you integrate through a licensed third party.
How to integrate
Ory Identities webhook → Your verification service → Licensed ASA/AUA → UIDAI CIDR
Common licensed providers: Signzy, Digio, Karza Technologies, IDfy.
Compliance must-haves
- Never store the full Aadhaar number — only masked or last-4 digits.
- Explicit consent (
consent: "Y") on every call. - Data localization: Aadhaar-derived data must stay in India. Keep full eKYC in India-hosted infrastructure; only persist verified-status + masked identifiers in Ory metadata.
- 5-year audit trail for authentication transactions.
- Aadhaar Act 2016 §28/§29/§33 restrict sharing, storing, and disclosure of core biometric data.