@zoocoup that kind of exists, though. If you’re using conditional access to your services, you can enforce biometrics as a factor. Also, if a user is signed in with a work and personal Apple Account, you get some greater control.
@marczak No, this is more brute force than that. “I want us to force everyone to use Face or TouchID on their phone” not just logging into Okta or corporate resources. They are afraid that new “passwordless” methods we are switching too will make it too easy for “a kid or spouse to access company data”