---
schema_version: "1"
id: 1292b0374332777e0fdcd907db74c606020ffd3353f868b6d25c9a06eafba78f
title: Enable Biometric ID App Unlock for iOS and Android
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/branded_apps_biometric_id_ios_android.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.branded_apps_biometric_id_ios_android.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 51949d9671e21bfb4dd0fedc00684366e94865e6dc7f1fae5344e10fec970f40
description: When using Mobile Publisher, you can apply biometric ID credentials to make your environment more secure. To use biometric ID credentials, your device must have a device passcode or PIN enabled and FaceID (for iOS) or Android Security and Privacy | Biometrics.
products:
  - Mobile App
  - Cross Cloud
release: "264"
---
# Enable Biometric ID App Unlock for iOS and Android

When using Mobile Publisher, you can apply biometric ID credentials to make your environment more secure. To use biometric ID credentials, your device must have a device passcode or PIN enabled and FaceID (for iOS) or Android Security and Privacy | Biometrics.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col style="width:100%"></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Setup for Mobile Publisher available in: Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Setup for Mobile Publisher available in: production only (not sandbox)</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in Lightning Experience in: <strong>Enterprise</strong>, <strong>Performance</strong>, and <strong>Unlimited</strong> Editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d3221e67">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d3221e67 ">To create and modify a Mobile Publisher project:</td>
            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d3221e67 ">Manage mySalesforce Apps</td>
          </tr>
        </tbody>
      </table>

Mobile Publisher apps support biometric ID app unlock using face or fingerprint credentials when the biometric authentication method is available on the Android or iOS device. Depending on the mobile device, Mobile Publisher also supports Swipe and PIN unlock.

When you enable biometric ID app unlock, users are prompted for their biometric credentials when they open the app with a cold start. A cold start is when the user opens the app for the first time or opens the app after closing the app entirely (swiping up to quit the app). If the user has no security settings enabled, they’re forced to log out of the app.

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mysalesforce-264-0-0-production-enus/a39debb4-ddcf-4d21-ae97-ca8229316d3a/images/icon_important.png)

Important Remember to wrap attribute values in quotation marks.

1. From Setup, in the Quick Find box, enter External Client App Manager, and then select **External Client App Manager**.
2. Select the external client app for the mobile app that you want to enable User Opt-In Biometric Login for.
    
    ![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mysalesforce-264-0-0-production-enus/a39debb4-ddcf-4d21-ae97-ca8229316d3a/images/icon_tip.png)
    
    Tip The name of the external client app is the name that you specified in the corresponding Mobile Publisher project.
3. Create a custom attribute that enables User Opt-In Biometric Login.
    
    1. In the Custom Attributes section, click the plus sign.
    2. For the attribute key, enter ENABLE\_OPT\_IN\_BIOMETRIC\_LOGIN.
    3. For the attribute value, enter "TRUE".
    
    ![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mysalesforce-264-0-0-production-enus/a39debb4-ddcf-4d21-ae97-ca8229316d3a/images/icon_note.png)
    
    Note If you previously enabled Biometric ID App Unlock, you don’t need to remove the ENABLE\_BIOMETRICS\_UNLOCK custom attribute. You can keep the ENABLE\_BIOMETRICS\_UNLOCK custom attribute along with the new User Opt-In Biometric Login custom attributes.
4. Create another custom attribute so that users can fall back to entering a secondary authentication method such as a passcode or pattern after a certain number of failed biometric login attempts.
    1. In the Custom Attributes section, click the plus sign.
    2. For the attribute key, enter ENABLE\_BIOMETRIC\_LOGIN\_FALLBACK.
    3. For the attribute value, enter "TRUE".
5. Create another custom attribute that [sets the timeout value for biometric login](https://help.salesforce.com/s/articleView?id=xcloud.branded_apps_biometric_id_ios_android_time.htm&release=264.0.0&type=5 "By default, users must reenter biometric ID credentials when the app is in the background for more than 15 minutes. You can set your own time value requirement by adding a custom attribute.").
6. Save your changes.

After you enable biometric ID app unlock, your app users must configure their devices to enable unlocking apps with biometric ID credentials in order to use this login method.

If Android app users don’t configure their biometric ID credentials, they’re prompted to proceed with one of these options: log out, log in on a browser, log in with a passcode, or to open their device’s settings.

![The screen shown to Android app users when there are no biometric ID credentials configured](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mysalesforce-264-0-0-production-enus/a39debb4-ddcf-4d21-ae97-ca8229316d3a/mysalesforce/images/branded_apps_no_biometrics_android.png)

If iOS app users don’t configure their biometric ID credentials, they’re prompted to log in with a passcode. If the iOS app user doesn't have biometric ID app unlock or passcode unlock configured on their device, the user is prompted to enable a passcode.

![The screen shown to iOS app users when they don't have biometric ID app unlock or passcode unlock configured on their device](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-mysalesforce-264-0-0-production-enus/a39debb4-ddcf-4d21-ae97-ca8229316d3a/mysalesforce/images/branded_apps_no_biometrics_ios.png)

- **[Set Time Value for Biometric Login](https://help.salesforce.com/s/articleView?id=xcloud.branded_apps_biometric_id_ios_android_time.htm&release=264.0.0&type=5)**  
    By default, users must reenter biometric ID credentials when the app is in the background for more than 15 minutes. You can set your own time value requirement by adding a custom attribute.