Enumeration Case

deviceOwnerAuthenticationWithBiometrics

Indicates that the device owner must authenticate using biometry.

Declaration

case deviceOwnerAuthenticationWithBiometrics = 1

Discussion

If Touch ID or Face ID is not available or not enrolled, policy evaluation fails. After three unsuccessful Touch ID or Face ID attempts in a row, policy evaluation will fail. Both Touch ID and Face ID authentication are disabled after five unsuccessful attempts, requiring the user to enter the device passcode in order to be reenabled.

The authentication dialog contains a cancel button and a fallback button. The fallback button allows the user to authenticate using the device passcode. The button titles can be customized using the localizedCancelTitle property or localizedFallbackTitle property.

The fallback button is initially hidden. For Face ID, after the first unsuccessful authentication attempt, the user will be prompted to try Face ID again or cancel. The fallback button is displayed after the second unsuccessful Face ID attempt. For Touch ID, the fallback button is displayed after the first unsuccessful Touch ID attempt.

Tapping the cancel button or the fallback button causes the evaluatePolicy(_:localizedReason:reply:) method to fail.