I'm trying to wrap my head around how to implement iOS/Android finger print to authenticate a user. From what I understand, triggering the finger print dialog is just an additional security? So a typical on boarding process would be something like this: User downloads the app. User registers/signs in, and get a token back from the server. On certain actions where we need additional security, trigger finger print dialog. If fingerprint is OK - do actual REST call with token from step 2. Am I missing something?

iOS/Android finger print - authentication server side

I'm trying to wrap my head around how to implement iOS/Android finger print to authenticate a user.

From what I understand, triggering the finger print dialog is just an additional security?

So a typical on boarding process would be something like this:

User downloads the app.
User registers/signs in, and get a token back from the server.
On certain actions where we need additional security, trigger finger print dialog.
If fingerprint is OK - do actual REST call with token from step 2.

Am I missing something?