---
title: Configuring the enforcement of device biometrics
description: How to configure a PingID device biometrics policy to require a hardware biometrics sensor when pairing or authenticating.
component: pingid
page_id: pingid:pingid_service_management:pid_configuring_enforment_of_device_biometrics
canonical_url: https://docs.pingidentity.com/pingid/pingid_service_management/pid_configuring_enforment_of_device_biometrics.html
llms_txt: https://docs.pingidentity.com/pingid/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: June 16, 2026
section_ids:
  before-you-begin: Before you begin
  about-this-task: About this task
  steps: Steps
---

# Configuring the enforcement of device biometrics

Enforce the use of a device that includes a hardware biometrics sensor, when pairing or authenticating with PingID.

## Before you begin

Before configuring the Biometrics Device posture policy, make sure the following options are configured in the **Configuration** tab, **Device Biometrics** area:

* **Device Biometrics**: Select either **Enable** or **Require**.

  ![Screen shot showing the Device Biometrics options in the Configuration tab.](_images/bxl1600933932156.png)

  |   |                                                                                                                                                          |
  | - | -------------------------------------------------------------------------------------------------------------------------------------------------------- |
  |   | If this option is set to **Disabled**, the Device & Pairing **Device Requirements**drop down list shows the Device Biometrics option, but it's disabled. |

* **Enable On**: Select the **iOS** and **Android** checkboxes. If the relevant checkbox is not selected, when a user signs on the policy is bypassed.

## About this task

Use the **Device Biometrics** policy to enforce the use of a device that includes a hardware biometrics sensor when pairing or authenticating with PingID. The user does not have to activate the biometrics sensor or define their biometrics before pairing or authenticating with the device.

The Device Biometrics policy is supported by PingID mobile app 1.12 or later. The policy is not evaluated for users running earlier versions of PingID mobile app.

## Steps

1. In the admin console, go to **Setup > PingID > DEVICE & PAIRING**.

   ![Screen shot show showing the list of Device Requirements policies.](_images/fov1564020701514.png)

2. In the **DEVICE REQUIREMENTS** section, click **Add**.

3. From the **Select a Condition** menu, select **Device Biometrics**. ![Screen shot showing the Device Biometrics policy.](_images/whs1600934328971.png)

4. Click **Save**.