This is a guide on how to determine if biometric authentication (using either fingerprint or facial recognition) is preferred or mandatory when users log in with Okta Verify.

• Okta Identity Engine (OIE)
• Okta Verify
• Multi-Factor Authentication (MFA)

1. Log in to the Okta Admin Console.

2. Navigate to Security > Authenticators.

3. Click Actions and then Edit on the Okta Verify authenticator.

4. Choose if User Verification is Required or Preferred.

   1. If User Verification is Required, during setup, users must enable biometrics on all platforms they are using. During authentication, only Okta Verify Push requires biometric verification. Users will not be able to disable biometrics after setup is complete.
        

   2. If User Verification is set to Preferred, users can enable biometrics during setup or later in the app and can disable biometrics anytime after setup is complete.
       
       
       

Related References

• Configure Okta Verify options