During Okta Verify setup on an Android device, an error occurs when attempting to enable biometrics with facial recognition. This issue occurs because the device camera does not meet the Android criteria for a Class 3 Biometric Implementation, or administrators set the Okta Verify user verification enrollment setting to require biometrics only, but the user's device lacks a compatible camera. To resolve this, use a supported device with a camera that meets the Class 3 Biometric Implementation criteria, or configure fingerprint verification.
The following error appears during setup:
Setup stronger biometrics.
Your current biometric settings aren't strong enough to protect your account. Go to your device's Settings app, set up a strong biometric such as fingerprint verification, then try again.
- Okta Identity Engine (OIE)
- Multi-Factor Authentication (MFA)
- Okta Verify
- Android
This issue occurs when administrators set the Okta Verify user verification enrollment setting to Required with biometrics only (as pictured below), but the Android device lacks a camera with a sufficiently strong biometric implementation for Face Unlock, and the user has not set up Fingerprint Unlock.
Android classifies biometric implementations using a Class scale. This scale indicates the security strength of a given biometric implementation. The error appears if the device camera does not meet the Android criteria for a Class 3 Biometric Implementation.
How is the stronger biometrics error resolved on Android devices?
Newer Android devices, such as the Pixel 8, Pixel 8 Pro, Pixel 9, and Pixel 9 Pro, support facial recognition for Okta Verify because the improved camera technology meets the Android criteria for a Class 3 Biometric Implementation.
If a device camera does not meet these criteria, Okta Verify generates the Setup stronger biometrics error.
On devices that do not meet the Class 3 requirements, users must configure fingerprint verification instead of facial recognition. Additionally, for devices running Android 12, Okta Verify does not support biometrics if the application resides in a work profile.
