How to configure Touch ID authentication with XenMobile Server for iOS devices

This article describes how to configure Touch ID within XenMobile Server for both MDX wrapped application and Worx Home running on an iOS device.

Background

Wrapped Applications
Touch ID is an alternative to Worx PIN when wrapped apps need offline authentication, such as when the inactivity timer expires. This feature can be enabled in the following authentication scenarios:

• Worx PIN + Client certificate configuration
• Worx PIN + Cached AD password configuration
• Worx PIN + Client certificate configuration and Cached AD password configuration
• Worx PIN is off

If Touch ID authentication fails or if a user cancels the Touch ID prompt, wrapped apps fall back to Worx PIN or Active Directory password authentication

Worx Home
With the release of XenMobile 10.3.5, iOS users??can sign in to Worx Home using Touch ID on supported iOS devices (iOS 8 and 9) that have the Touch Id feature - this replaces the use of a Worx PIN in certain scenarios.
However, users will still have to enter Worx PIN whenever online authentication through NetScaler Gateway is required. This is required in the following instances:

• The user's session has expired.
• The user reboots the device.
• Worx Home is not currently running and the user launches it or an MDX app.

Requirements

Touch ID authentication requirements:

• iOS devices (minimum version 8.1) that support Touch ID and have at least one fingerprint configured.
• User entropy must be off

??
Note: To allow users to use Touch ID when they start an app, enable Worx PIN and set User Entropy to false. After configuring these settings, users do not need to enroll their devices again

Configuration

Important: If User Entropy is On, XenMobile ignores the Enable Touch ID Authentication property.??Thus User Entropy should be set to false.

1. In the XenMobile console, go to Client Properties and then search for ENABLE_TOUCH_ID_AUTH.
2. Set the Value to true

??

??
??
??
??