# 4.26 How to set up Image-Based Behavioral Identity Check (Image Note Assertion)

The feature introduces a simple, personalized challenge that verifies identity using user-specific choices made during registration.

Users select an image and provide a personal note during signup. During login, after entering their username, they must select the same image and re-enter the note. Access is granted only if both match the stored data.

This step adds a behavioral layer to authentication, enhancing security through personalized verification.

1. **Configure the Image-Based Behavioral Identity Check**
   1. Log in to the ZTrust Admin Console and select the realm you want to configure.

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXf6XPJ2K3FDYzmXyEx1YoYWBMSzQITYjz2ZbKndtzrroMjrw7pJT_Ai87u2bxcS3d1_zU5mj6WPkGVLU5Bw5f5rXz7Ehy8XoXUf4Ng7l1zcLo7pN4p9ktYwYOaCtHG1y27CfoHM?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.a: List of realms under manage realm</p></figcaption></figure>

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXf1TWd4swqByXdS8sJrg9uMakfrBcqiZ_KC0xUC2hqw8v5oj5LQLrNxgtCSfm2O3Uf4z3f68vIulrv9yp6f5NYsvQeOZqWTJ6owrJTugNFZJ9YK_JBueknBT1c9Kx2O1g1ilkd_?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.b: Welcome page of test realm</p></figcaption></figure>
   2. Go to the Authentication section

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXd1y3TERavwJgi9Z4LD_ShwBbWjcXK4PMmmU0kuDKKDxonsrYRgT9wulKPgAJDTqRLHcJhL_aWpoRsUWGzCS47HZN0I-7X7z3sCbuvuvB1Y0TfFq0EDoAAw9AdJDyD6651UQjkbBg?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.c: Navigating to authentication section in side bar</p></figcaption></figure>
   3. Next, create a copy of the browser authentication flow and configure the Image Note Assertion step within it.

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXddLLpRc2vPJG38kr7PUHm0EDFrVOlAwiw8_Zl4SnE_1Ygd8t3kJ90HJJiXNNhu2g3t9f9Bjq4MJ9xHoPXjAXAkce4huF9-uIRt2lVHyfYbSZrRj1h-qgAWJUk0ObdavVrtZT8WAg?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.d: Add execution to the browser flow</p></figcaption></figure>
   4. It should be configured as shown below.

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXe5-HgyquaSKS41CAOAb7iiLCC9KIfFoOKiMOLS8IJSL03hr_rtnBUaXLx6oB5hAbgU71HjXkSmlsfaTqpXvXDf61uiEWD917zAR8QwFMOm--a5OZaETE9A0IlVDeOxP6Fg3BDH?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.e: Browser flow configuration</p></figcaption></figure>
   5. Next, configure the flow for registration. Return to the Authentication section to proceed.

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdSmC_zjLDWgamvYFegiP5sf4OYymA6YezL5rO5c5WAyb5F1EbrUKhjqslmtSewm2tMpTuQCfrE0tOb4A_enidniFhPpy2ODDWti0aSRpAz7ArArGlZVIGJd3zqmCJAn0ORJoiXKA?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.f: Navigating to Authentication section in side bar</p></figcaption></figure>
   6. Navigate to the Required action tab

      \\

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfJvK3cw6eTdikMdtqK5iseRTwBFG-9NYj1VoRqCbMI8diHhTzxuK3e1Qfys_PczmYLbh4PIJILBSV6QWUhZqAw2ZhUP5l6cdqJKdnSaBuuCJVino2iU0krvd8GLvvlVTUea135Tw?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.g: Navigating to Required actions</p></figcaption></figure>
   7. Then enable the Image note assertion like below

      \\

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdsPO2w0sI86a9SaV_8ciY3GK9is7QTS6Y47euj2rKUzDXZAlMCO7TVNEVtCbW5s_dbTuNDlWHeYQxJaJ7eH7RVpTjhjx68GCJmSgKhGwdeSw0QkFhAc5-w_2viCPZLAMIG4jLyiQ?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.h: Turn on the Image Note Assertion Action</p></figcaption></figure>
   8. Now configuration is completed. We will attempt to register and log in to the self-service portal.
2. **Registration**
   1. If a user does not exist in ZTrust, please register as a user by providing below details.

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeK8Y9GLaDuvbPXdVWevURKRMKUW5OJvK46IeECpIdd0Mpy69wN6FBTh8KpOB5FHApol8DkLVb3qCsD7PUJ8gGJ6tq0g_p9ivlZw1_IVxLlw6-T045uDEvi39Mx9d_2_9KmY_m3Bw?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.i: Registration Page</p></figcaption></figure>
   2. After filling in all the required fields, the user is directed to the next page where they must select an image and provide a prompt.

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdkLWgXQ69IQG0eLKJ6DvisYH9B8XOEAe828ElqIJXBs1AJQTamnHl1cOwGCbD1qWmDrQXXAAM6thk9oDRjJyUQdBCsFLG4kdKzKZyeMB67m4bQ67KHPXRFNTLbS5AQryQ8uOj4?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.46.j: Images with images with image identification field</p></figcaption></figure>
   3. For example, the user selects an image, enters a note, and then submits the information.

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXf2aJmueb3lgUAMH97INaZRbw4_MOzu8W7WqAfwZKymMY-sYuRV2KIL2VuVTR8qMB4YLiysLdbYd6qglg9KT_RlDiX5MDdaxf52uE8ZmSiz9rpKVkN_2Tu2oqkbVGWPQrLXaXnB?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.k: Image identification promt provided</p></figcaption></figure>
   4. User successfully created in ZTrust.
3. **Login**
   1. The user created in ZTrust will now attempt to log in with the same user. After successful validation, they are redirected to the next page for personal note verification.

      <figure><img src="https://1778922777-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3EUK5AUZv0UVaI5S0CTM%2Fuploads%2FTnVzZcKJWbMPEzxm3b3K%2Fimage.png?alt=media&#x26;token=d5467c12-adb3-4cb1-b6b8-1930ccab976d" alt=""><figcaption><p>Fig 4.26.l: Username form login page</p></figcaption></figure>

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfd3VZh8w_FlCkcAFV-vhSTxDOohsM6K2eoLOZvwF7Az2NMTMMHoSBj_jhXhzr7NqLyUKoz9lcKFH4WwgPfY0XqH-2PLT0RFseMqdSfDG3-eqxYjG__wjRBtWPuZfAHWW7-ZKgETw?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.46.m: Images with images with image identification field</p></figcaption></figure>
   2. If the personal note is incorrect, an error message will be displayed as shown below.

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfWhx0YXPzlKIvJF2CdfO-tFlaMs_elD_S_y4096GJC23fuz7fSQDVSoIzKiLpfVQCuoviN7lRnNo18qV4BhiAR4hOF7uZURHrojn6jST53Ha1PG7wuJP0boX2RGcIZQ6r9Jg2xmw?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.n: Image identification prompt error</p></figcaption></figure>
   3. If the correct image and corresponding prompt are selected, ZTrust grants access to the user

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcDZugt_Bjq8725Nz45mpXClgM80iB05x6Qkdy18KxN7KjgBlHnfCsNYUZljpEk-trYLuAuAPFxx7MHYV9ws87CHshP4XMhrECLr8STzqgB72ejs-zEqa-GkYiGpC0m0TPU_c-Thw?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.26.o: Image identification prompt provided</p></figcaption></figure>
   4. User successfully logged into to the SSP

      <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeVuF9i1-4Hdf6nKWg6n0AgCi_617-4V4AO2xaPSkPPczOsTPpPa4fz4XpymXvTXpp-txPdkmV_cfUX9CxbbEzvwDpF2vp5sDcy62zXh9JfN6cBD1KgRMLVxbRqTmL_zyVSx8P-Og?key=hxVELUZq9TjIyEHYBf-Zkg" alt=""><figcaption><p>Fig 4.16.p: Self service portal</p></figcaption></figure>
