Enable Fingerprint Authentication with Auth0
Tags: security, programming, tutorial
Published: 2022-03-04 14:06:58

### Learn how to enable fingerprint authentication for login with Auth0.

### <br>

Over the years, how you prove your identity and login to websites has changed. From using only a password, using a password plus a code sent your mobile device, using authenticator apps, to even going _passwordless_ by having an email sent to you and logging in there. Each iteration is an attempt to keep your identity safe and secure. 

WebAuthn was announced as the recommended standard for passwordless login in recent years. WebAuthn is a browser-based API that allows secure user authentication by using registered devices (phones, laptops, etc.) as authentication factors. This blog post will show you how fast you can enable device biometrics for your users to log in using the Auth0 dashboard.

## What You'll Need

To enable and test out fingerprint authentication, you will need a few things:

* **Auth0 Account.** Sign up for a <a href="https://auth0.com/signup" data-amp-replace="CLIENT_ID" data-amp-addparams="anonId=CLIENT_ID(cid-scope-cookie-fallback-name)">free Auth0 account</a> if you don't have one.
* **Any application that uses your Auth0 tenant to provide Universal Login.** Any web-based, mobile, or desktop application will do, just as long as it is one of your tenant's applications. If you don't have any applications that use Auth0 for authentication, you can download one from the [Auth0 Quickstarts](https://auth0.com/docs/quickstarts/) page.
* **WebAuthn Compatible Device** A computer or smartphone with biometrics built-in (Touch ID on Mac, for example).

## Enable Biometric Login Flow

On the left-side menu of the Auth0 dashboard, click **Authentication>Authentication Profile**. The _Authentication Profile_ page is where you choose how users will authenticate their identity when logging in to your application. 

![Auth0 Dashboard Side Menu](https://images.ctfassets.net/23aumh6u8s0i/646bZGVEd7cE2iyRioHonq/ac74ca497a3f913cecdeedc05f9a1abc/auth0_dashbord.png)

You'll have the option to choose between three different login flows:

* **Identifier + Password** - a single login screen that asks for the username and password.
* **Identifier + First** - has two screens. One for the users to enter an identifier, then another screen for the password.
* **Identifier First + Biometrics** - allows users to sign in using face or fingerprint recognition instead of a password.

Click **Identifier First + Biometrics** then click **Save**. This sets the login box to ask for an identifier first, like an email address, then ask for the biometrics identifier like a fingerprint. 

After a device is registered for authentication, this creates a secure relationship between the application and the device, allowing users to login in a secure manner. Click **Confirm** on to enable Webauthn device biometrics.

![WebAutn Device Biometrics Confirmation Modal](https://images.ctfassets.net/23aumh6u8s0i/54D7A7i1R4hSgrTsvu9MVK/cdfeb155c3eed9fad84be4cb7e73c0b7/webauthn_confirmation.png)

The following user who logs in or signs up will be prompted to enroll their device for quick and secure login. Let's test out this flow from the users' perspective.

> Learn more about WebAuthn and test out using hardware authentication with the interactive demo on [webauthn.me](https://webauthn.me/). A site maintained by Auth0.

## Test WebAuthn Enrollment

The fastest way to test this is right on the _Authentication Profile_ page. In the upper right-hand corner, click **Try**.

![Auth0 Dashboard Authentication Profile Page](https://images.ctfassets.net/23aumh6u8s0i/155RocmMWOUTnwRI6vYDqP/f5cde8f2a017d5a37b154538edf97f9a/try_button.png)

This will bring up the Auth0 universal login box. You'll log in with a username and password as normal. Once those credentials are verified, you'll be met with the "Login in faster on this device" prompt. Which lets you know that you use your fingerprint or face recognition to log in. Click **Continue**

![Auth0 Long In Faster Screen](https://images.ctfassets.net/23aumh6u8s0i/6nQuQcDC6aLDDJBGSvIieK/3180262b363896a99d371c0229cc28c4/Screen_Shot_2022-02-23_at_4.37.39_PM.png)

Clicking continue brings up a prompt from your device alerting you that your browser is trying to verify your identity. You then register your fingerprint using something like Touch ID if you're using a Mac.

![macOS Touch ID prompt](https://images.ctfassets.net/23aumh6u8s0i/45MRt2zzkxol16HSy8aNuy/9daf52c856f8d176182c90f719007ff4/Screen_Shot_2022-02-23_at_4.38.15_PM.png)

Finally, it will ask you to name your device; click **Continue** the next screen lets you know that the device is successfully registered. 
[Read more...](https://auth0.com/blog/enable-fingerprint-authentication-with-auth0/?utm_source=content_synd&utm_medium=sc&utm_campaign=authentication)