Create a Mac Fingerprint Timeout Policy

If your fleet has macOS devices that use Touch ID, users can use a fingerprint to unlock their devices and do other tasks. JumpCloud’s Enforced Fingerprint Timeout Policy lets you change the fingerprint timeout period for your users. Adding this policy to a user's device shortens the period between required entry of the password. After you set a timeout value and it expires, the user can unlock the device by entering a password to authenticate. 

This policy only applies when users are using Touch ID. The policy works on macOS devices running macOS 11 and later.

To create a macOS Enforced Fingerprint Timeout policy:

1. Log in to the JumpCloud Admin Portal: https://console.jumpcloud.com/login.
2. Go to DEVICE MANAGEMENT > Policy Management.
3. In the All tab, click (+).
4. On the New Policy panel, select the Mac tab.
5. Select Enforced Fingerprint Timeout from the list, then click configure.
6. (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
7. (Optional) In the Policy Notes field, enter details like when you created the policy, where you tested it, and where you deployed it.
8. Under Settings, select Enforced Fingerprint Timeout and choose the amount of time before users have to enter their password again. Choosing a shorter timeout can impact your users, because they’ll be required to re-enter their password more often. The maximum timeout value is 48 hours.

9. (Optional) Select the Device Groups tab. Select one or more device groups where you’ll apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.
10. (Optional) Select the Devices tab. Select one or more devices where you’ll apply this policy.
11. Click save.
12. If prompted, click save again.