capturing, at a first self-service kiosk, live biometric data of a person, the live biometric data including a facial image of the person;

extracting, at the first self-service kiosk, reference biometric data from a biometric identification document, the reference biometric data including a reference facial image;

comparing the facial image with the reference facial image of the reference biometric data extracted from the biometric identification document to verify an identity of the person;

in response to verification of the identity of the person, storing enrollment data including (i) the facial image used for comparison with the reference facial image, and (ii) additional data corresponding to the person;

subsequent to storing the enrollment data, capturing, at a second self-service kiosk, further live biometric data of the person, the further live biometric data including a further facial image of the person;

in response to capturing the further live biometric data, retrieving the enrollment data;

comparing the further facial image with the facial image of the enrollment data to authenticate the person; and

in response to authenticating the person based on the comparison of the further facial image with the facial image of the enrollment data, granting the person access to a restricted area, at the second self-service kiosk.