Back to case studies // authentication

Online Exam Integrity

A university protected high-stakes remote exams with Veripass biometric identity verification and step-up authentication, proving the person sitting the exam was the enrolled student.

May 12, 2025 · Veripass
Online Exam Integrity

Remote examination broke an assumption that physical exam halls quietly enforced: that the person taking the test is the person enrolled in the course. Online, a login proves only that someone has the credentials — not that the right human is at the keyboard. For high-stakes exams, that gap is an integrity crisis, and impersonation is the threat that worries faculty most.

The challenge

The university’s remote exams authenticated students with the same campus login they used for everything else. That login was easy to share, and once shared, nothing downstream distinguished the enrolled student from a stand-in. Faculty had no way to assert, at the moment of the exam, that the credential and the person matched. Proctoring tools helped, but they sat outside the identity layer and produced evidence that was hard to tie back to a verified identity.

The university needed exam access gated on proof of the person, not just possession of a password.

What Veripass deployed

Veripass placed biometric identity verification directly in front of the exam. Before a high-stakes assessment unlocked, the student completed a face capture matched against their ID document, establishing an evidenced link between the human present and the enrolled identity. Where stronger assurance was warranted, fingerprint verification reinforced it.

This rode on context-aware, policy-based access: the exam surface was classified as high-risk, so policy demanded a biometric step-up that ordinary coursework did not. Authentication still anchored to the campus directory over OIDC, but for the exam the established session alone was deliberately insufficient — the policy escalated to fresh biometric proof. Authorization through claims, capabilities, roles, and access profiles ensured only students actually enrolled in the course could even reach the exam.

Every verification event landed in an immutable audit trail, attributed to the student, the exam, and the policy, giving faculty defensible evidence if an integrity case ever arose.

  • Biometric verification (face, ID document, fingerprint) before exam access
  • Context-aware policy classifying exams as high-risk surfaces
  • Biometric step-up beyond the standard campus session
  • Enrollment-scoped access via claims, capabilities, roles, and access profiles
  • Immutable audit trails evidencing each verification

Outcome

Sitting a high-stakes exam now requires proving you are the enrolled student, not merely knowing a password. Credential sharing stopped being a viable path to impersonation, because a shared login cannot clear the biometric step-up the exam demands.

When an integrity question does arise, faculty have an immutable record tying the verified identity to the exam session, rather than circumstantial proctoring footage. The university extended remote examination to more courses with confidence, because the identity gap that made high-stakes online exams risky was closed at the moment that matters.

More deployments

Campus-Wide Student SSO

Campus-Wide Student SSO

A university gave every student one login for the entire campus stack by federating Google Workspace and the student directory through Veripass, ending the credential sprawl across portals and services.

Clinician EHR Single Sign-On

Clinician EHR Single Sign-On

A hospital network gave clinicians one federated sign-on across the EHR and clinical applications, cutting repeated logins at the bedside while keeping every access policy-governed and audited.

Fingerprint Turnstile Entry

Fingerprint Turnstile Entry

A manufacturing site replaced badge tailgating at its turnstiles with fingerprint biometric verification bound to identity, so every entry proved the person was physically present and authorized.