Solved

Exchange Activesync Biometric Policy

Posted on 2013-11-19
1
1,479 Views
Last Modified: 2014-12-01
Android has several devices in the pipeline that will offer fingerprint authentication to the device as well as apps and services (think fingerprint for paypal login).  I am wondering if ActiveSync password/passcode policies will work.  We have a passcode requirement, so for example the Android Pattern lock/unlock does not work and users must enter the passcode after entering the pattern to view their email.

The iPhone 5s seems to have skirted the ActiveSync passcode requirement by effectively converting the fingerprint data to the pre-set passcode and passing it along to be checked for policy compliance.

http://technet.microsoft.com/en-us/library/dn282287.aspx

The above mentioned TechNet article describes policies which, if enabled,  allow biometrics to be a valid authentication mechanism.  The base Exchange 2010 Activesync Mailbox Policies do not offer it as an option.  Is it event possible ?

Has anyone attempted/implemented biometrics in relation to ActiveSync?

Thank you for reading.
0
Comment
Question by:collabsvcs
1 Comment
 
LVL 37

Accepted Solution

by:
Jamie McKillop earned 500 total points
ID: 39662384
Hello,

The only way biometrics will work is if it is converted to a passcode, as the iPhone 5S has implemented. Currently, the ActiveSync protocol does not have a mechanism for accepting biometric authentication directly.

You can still use biometrics on your devices but there is no way for ActiveSync to enforce their use and you would need to set your ActiveSync policy to not require a passcode. This would rely on you trusting users to setup the biometrics and could result in some users not having any authentication on their device. There may be third party MDM solutions you could look into that would enforce the use of biometric authentication but MDM solutions are generally quite expensive.

-JJ
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
Here, we have shared an easy step by step tutorial on how to download instagram images and videos on PC, Android Mobile and iOS mobile.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
how to add IIS SMTP to handle application/Scanner relays into office 365.

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question