


In addition, selecting Yes makes Require biometric authentication for mobile authenticator and QR code authenticator redundant. For more information about how Android biometric security is determined, refer to. The fingerprint scanner is the most common strong biometric on Android devices. Depending on the device, strong biometric options can include a fingerprint scanner, face recognition, an iris scan, or a combination of face recognition and iris scan. On Android, priority is given to biometrics that qualify as "strong". On iOS, priority is given to FaceID or TouchID as per availability. If you configure this option, users can not configure the Lock on Exit switch on the device. Specifies the need for users to enter the PIN after the CyberArk Identity mobile app has been closed.If you configure this option, users can not configure the Inactive Timeout value on their devices. Automatically locks the CyberArk Identity mobile app on devices after the specified number of minutes.Require authentication to open CyberArk app - This setting must be set to Yes to configure the following rules relating to CyberArk Identity mobile app PIN use: or No (- is the default setting) - Users are not automatically signed in to the CyberArk Identity Portal if the CyberArk Identity Android app is already unlocked and open (additional unlock mechanisms are required to access the CyberArk Identity Portal). Yes - Users are automatically signed in to the CyberArk Identity Portal if the CyberArk Identity Android app is already unlocked and open (no additional authentication is required). See Authentication mechanisms for information specific to the Mobile Authenticator mechanism.Įnable auto-login to Identity portal from Android browser with Android app unlock (applies to Android devices only) Hover your mouse over the information icon for more information. Show Mobile Authenticator by default - Controls the availability of the Mobile Authenticator option on user mobile devices.Hover over the information icon associated with each setting for more detailed information. Set the rules for CyberArk Identity mobile app PIN requirements on devices and device PIN requirements. whether or not the device reports the device location.whether or not the user can unenroll the device.whether or not the user can wipe device.

