Hi everyone,
We’ve been tightening access to corporate email on our iOS devices, especially for users handling sensitive data.
Right now, once the device is unlocked, Outlook opens without any additional checks. We’re trying to see if there’s a way to require Face ID before users can access their mailbox.
Has anyone set this up using Hexnode?
19 Views
Hi @haniel,
Yes, this can be configured in Hexnode by combining a few policy settings.
To enforce biometric authentication for Outlook, you’ll need to:
Configure a Passcode policy to ensure a strong device-level security baseline.
Use Advanced Restrictions to prevent users from modifying Face ID / Touch ID settings.
Apply App Configuration for Microsoft Outlook to enable biometric authentication and prevent users from disabling it.
This setup ensures that when users open Outlook, they are prompted for Face ID (or Touch ID), even if the device is already unlocked.
For a detailed step-by-step guide, please refer to our help documentation on How to require Face ID for corporate email via Hexnode UEM?
Best regards,
Isabel Lora
Hexnode UEM
Did users have any issues or complaints when you enforced this? Just trying to understand how it impacts day-to-day usage.
Yeah, we’ve already rolled this out in our environment.
There were a few initial questions from users, mostly around whether it would slow things down. But once they started using it, there wasn’t really any pushback.
Face ID is quick, so it doesn’t feel like an extra step. After a short while, it just became part of their normal workflow.
Don't have an account? Sign up
