Specops Fingerprint

Specops Fingerprint enables users to enroll and authenticate using devices with fingerprint scanners, such as smart phones and tablets. Users can press their finger to the fingerprint scanner on their device to instantly identify themselves. Users can also use Face ID to authenticate, if they own an iPhone X and above. In order to use this identity service, users must have the app installed on their mobile device.

Configuring Specops Fingerprint

You can configure Specops Fingerprint to enable or disable sending push notification to the user. For an added layer of security, you can add a challenge in the form of a QR- or number code. This challenge will be presented to the user before they can authenticate with biometrics.

NOTE
By default, push notifications will be turned on, and challenge will be set to None.
  1. In Authentication Web, go to Identity Services, and in the list click the configuration icon for Specops Fingerprint.
  2. Uncheck the Send push notifications when authenticating checkbox to disable sending Push notifications.
    NOTE
    Disabling push notifications can be a good way to counter so-called fatigue attacks where users are presented with multiple simple push notifications in an attempt to have them authorize an authentication they have not themselves initiated.
  3. In the Challenge Type dropdown, select the type of challenge you want to present to your users:
    • QR
    • Number Input
    NOTE

    None: users only need to authenticate with biometrics without any challenges.

    QR: users are presented with a QR code that is scanned with the app before proceeding to authenticate with biometrics.

    Number Input: users are presented with a number code that has to be input in the app before proceeding to authenticate with biometrics.

  4. Click Save