You can configure Specops Fingerprint to enable or disable sending push notification to the user. For an added layer of security, you can add a challenge in the form of a QR- or number code. This challenge will be presented to the user before they can authenticate with biometrics.
- In Authentication Web, go to Identity Services, and in the list click the configuration icon for Specops Fingerprint.
- Uncheck the Send push notifications when authenticating checkbox to disable sending Push notifications.
Disabling push notifications can be a good way to counter so-called fatigue attacks where users are presented with multiple simple push notifications in an attempt to have them authorize an authentication they have not themselves initiated.
- In the Challenge Type dropdown, select the type of challenge you want to present to your users:
- QR
- Number Input
None: users only need to authenticate with biometrics without any challenges.
QR: users are presented with a QR code that is scanned with the app before proceeding to authenticate with biometrics.
Number Input: users are presented with a number code that has to be input in the app before proceeding to authenticate with biometrics.
- Click Save