---
title: Authenticating using biometrics
description: If you have the PingID mobile app running on your mobile device, you might be asked to authenticate using device biometrics, such as fingerprint or facial recognition, to securely access your resources.
component: pingid-user-guide
page_id: pingid-user-guide:pid_mobile_app:pid_mobile_app_biometrics_auth
canonical_url: https://docs.pingidentity.com/pingid-user-guide/pid_mobile_app/pid_mobile_app_biometrics_auth.html
revdate: March 3, 2024
section_ids:
  before-you-begin: Before you begin
  use-cases: Use cases
  steps: Steps
  result: Result:
  choose-from: Choose from:
  result-2: Result
---

# Authenticating using biometrics

If you have the PingID mobile app running on your mobile device, you might be asked to authenticate using device biometrics, such as fingerprint or facial recognition, to securely access your resources.

## Before you begin

* Register biometrics on your mobile device.

* Pair PingID mobile app with the relevant account, site, or app.

  * Learn more about [pairing your organization with PingID mobile app.](ug_mobile_app_pairing.html)

  * Learn more about [pairing a third-party account, site, or app with PingID mobile app.](ma_as_authenticator_app.html)

## Use cases

Biometrics authentication is only available if the option is enabled by the organization or third-party account that you're trying to access. Authentication varies slightly depending on your phone model, phone settings, and whether your device is locked or unlocked when sending the authentication request.

The following animations demonstrate the two most common use cases when you are asked to authenticate with PingID using your device biometrics:

* **Passwordless authentication**: No password required.

  ![Animation of a passwordless authentication flow using PingID mobile app and device biometrics.](_images/biometricspasswordless-ezgif.com-optimized.gif)

* **Second factor authentication**: Enter your username and password, and then open PingID mobile app and authenticate with your biometrics.

  ![Animation showing authentication with PingID  mobile app biometrics as a second factor](_images/cvl1707751880027.gif)

## Steps

1. Sign on to your account or device, or access the application that requires authentication.

   ### Result:

   You'll see the **Authenticating** window and an authentication notification request is sent to your mobile device.

   ![Authenticating screen, showing an authentication request has been sent to your phone, and the system is awaiting a response. The Change Device button is also shown.](_images/authenticating_window.png)

2. Accept the authentication notification message that asks if you are trying to sign on:

   ### Choose from:

   * If your device is locked, long press or swipe the notification until it shows the option to approve or deny the request, and then tap **Yes**.

   * If your device is unlocked, on the notification, tap **Yes** or long-press the notification until it shows the option to approve or deny the request, and then tap **Yes**.

     |   |                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
     | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
     |   | If configured by your organization, you'll see a map on the notification screen, showing the location, device type, and browser used by the device attempting to accessing your account or app. This can help you identify a fraudulent authentication attempt.![A screen capture of the PingID mobile app notification authentication request asking whether the user is trying to sign on, with Yes or No options.](_images/bsq1700993655480.png) |

   * If your mobile phone is unlocked and PingID is open, you'll be asked to authenticate with your biometrics.

     ![\[A screen capture of the PingID mobile app requesting approval for you to authenticate by Face ID scan. It shows the Yes, and No it's not me Buttons\]](_images/mgj1708854090834.png)

3. You might be asked to authenticate by [number matching](pid_mobile_app_number_matching_auth.html). If so, PingID mobile app opens and displays a number-matching screen. Select the same number that appears on the **Authentication** screen or enter it manually if required, and then authenticate with your biometrics.

   ![PingID mobile app showing a list of numbers and a message asking you to select the number that matches the number displayed in the authentication screen. It also has the option to tap the button entitled 'No it's not me'](_images/ues1708854260154.png)

## Result

An **Authenticated** message with a checkmark appears, indicating successful authentication, and your access is approved. You are automatically signed on to your application.

![A screen capture of the green Authenticated message with a checkmark indicating successful authentication and your access is approved.](_images/ukc1708854295493.png)