Unable to Disable Windows Hello Confirmation in Windows Okta Verify
Dec 10, 2025
Okta Classic Engine
Multi-Factor Authentication
Okta Identity Engine
Overview
This article explains why the Windows Hello Confirmation toggle cannot be disabled in Windows Okta Verify. In Windows Okta Verify, the setting will be greyed out.
Applies To
- Windows Okta Verify
- Windows Hello Confirmation
- Okta Verify Enrollment Settings
Cause
Enrollment settings for Okta Verify are configured as required or required with biometrics only. These settings can be found in the Okta Admin console under Security > Authenticators > Okta Verify Actions > Edit.
Solution
To allow end-users to disable the Windows Hello Confirmation setting in Okta Verify, adjust the Okta Verify enrollment settings to preferred. These settings are in the Okta Admin console under Security > Authenticators > Okta Verify Actions > Edit.
