Login Flow Not Always Prompting for Login with Biometrics
Last Updated:
Overview
This article explains one possible reason why Login with Biometrics is not always prompted on enrolled devices.
Applies To
- Biometrics
Cause
The heuristic used to detect if biometrics should be prompted is based on the user agent and the DID cookie. The DID cookie is used as a way to prevent user enumeration.
This issue can be reproduced by deleting the DID cookie from the tenant domain in the browser. This causes the authentication process to request a password instead of biometrics. After logging in successfully with the password, the next login prompts for biometrics as long as cookies are not deleted.
NOTE: This can also be reproduced by selecting Non-persistent Session in the Advanced Tenant Settings and closing the browser.
