We have a deployment with AM 8.4 integrated with the Cloud Authentication service, using Approve and Tokencode methods.
We've upgraded to Patch 9 to be able to use Device Biometrics. After patch installation, we've modified the assurance level in Cloud to include Device Biometrics as first option and pushed the changes.
We're testing it, and following the documentation if we put and existing PIN we should be prompted for Biometrics or Approve... but we end getting an Approve.
Have we missed any step(s) to make this work?