After removing a fingerprint (or multiple) associated with Touch ID on a macOS Device and then adding a fingerprint back, the users will be asked to Enable TouchID while displaying an error similar to the one below, namely a grey (unavailable) Disable Touch ID option:
"Your organization requires Touch ID. Click
Enable Touch ID to keep using this account"
- mac
- TouchID
- Okta Verify
- Okta Identity Engine (OIE)
- FastPass
- Fingerprint Removal
If the end-user removes the Touch ID from the mac device, Okta Verify will try to find it but fail. Thus, based on the policies, the End-user will not be allowed to authenticate successfully.
If the customer adds a new Touch ID, the newly enrolled fingerprint will not be recognised by the Okta Verify app because the new Touch ID possesses a separate ID, not the one that Okta Verify has stored in its internal logs as a valid source of authentication. This will cause a conflict within the app, forcing the user to re-enroll entirely in Okta Verify.
If it has reached the point where a fingerprint was added again to the app and the issue persists, the solution is to remove the Okta Verify enrollment and do it all over again.
