Unable to Disable Windows Hello Confirmation in Windows Okta Verify
Last Updated:
Okta Classic Engine
Multi-Factor Authentication
Okta Identity Engine
Overview
End-users cannot disable the Windows Hello Confirmation toggle in Windows Okta Verify when the enrollment settings mandate Required or Required with biometrics only. Adjusting the Okta Verify enrollment settings to Preferred allows end-users to disable the setting. The Windows Hello Confirmation setting appears greyed out in the Windows Okta Verify application.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Windows Okta Verify
- Windows Hello Confirmation
- Okta Verify Enrollment Settings
Cause
The Okta Verify enrollment settings mandate Required or Required with biometrics only.
Solution
How do end-users disable the Windows Hello Confirmation setting?
Adjust the Okta Verify enrollment settings to Preferred in the Admin Console to allow end-users to disable the Windows Hello Confirmation setting.
- Navigate to the Admin Console.
- Go to Security and select Authenticators.
- Select the Actions dropdown menu for Okta Verify and choose Edit.
- Change the enrollment settings to Preferred.
