After upgrading from Okta Classic to Okta Identity Engine (OIE), “Require Touch ID or Face ID for Okta Verify (only on iOS)”  is no longer mandatory. In OIE, it will default to User verification Preferred, for any device that supports Biometrics.

Changing the option to “Required” will generate the following error on users' devices:

Failed to send push authentication response
 

• Okta Verify with Biometrics
• Okta Identity Engine (OIE)
• Multi-Factor Authentication (MFA)

• The error appears because the user did not have biometrics enabled on their device within Okta Verify.
• If user has biometrics enabled and issue still persists, ensure that the user is not connected to a VPN with anonymizer proxy enabled, as this can also cause the following error to appear and prevent users from completing authentication prompt.

Users must set up biometrics in Okta Verify in order to avoid receiving the error.
 

Related References

• Configure biometrics or screen lock confirmation in the Okta Verify account on Android devices
• Configure Face ID or passcode confirmation in Okta Verify on iOS devices
• How to Choose Whether Biometrics (Fingerprint or Face Scanning) is Preferred or Required when Users Sign In with Okta Verify