Biometric Authentication

You can log in to Costpoint Mobile T&E using the biometric authentication feature.

This functionality is controlled by a server setting, which, if enabled, allows you to enable or disable the biometric login on the Settings screen in Costpoint Mobile T&E.

You can use the Biometric authentication feature under the following conditions:
  • The ALLOW_BIOMETRICS setting in the configuration.ini file is set to true. The Costpoint Mobile T&E installer will automatically update this setting.
    Attention: For more information on how to enable the biometric authentication setting, see the Deltek Costpoint Mobile Time and Expense Technical Installation and Configuration Guide.
  • You are using a device that support biometric authentication:
    • Touch ID on all supported Apple devices
    • Face ID on all supported Apple devices
  • The device has at least one fingerprint or has a Face ID setup (which implies that the device is encrypted and also has a passcode, which are required).
  • If you are using Two-Factor Authentication (2FA) with Microsoft Authenticator and Face ID on iOS devices, you may get stuck when trying to approve an authentication from Microsoft Azure. This is a known issue with the Microsoft Authenticator application, and the workaround is to use PIN instead of Face ID with the application.

If you use Costpoint Mobile T&E on a device that supports biometric authentication, the application displays a message that biometric authentication is supported and that you can enable it on the Settings screen.

Biometric authentication identifies you using your unique body measurements or characteristics, such as your fingerprint, or your face. Use the fingerprint sensor or face recognition function of your device to set up the biometric authentication. The next time you log into the application, Costpoint Mobile T&E prompts you to use your fingerprint or face. If biometric authentication fails, Costpoint Mobile T&E prompts you to choose between PIN or biometric login during subsequent logins (just once).

Note: PIN is not required if you are using your device's biometric authentication to log into the application.