To use Face ID for user authentication in Horizon Client, you must meet certain requirements.

iPad and iPhone models
Any iPad or iPhone model that supports Face ID, such as iPhone X.
Operating system requirements
  • iOS 11 or later.
  • Add a Face ID scan in the Face ID & Passcode setting.
Connection Server requirements
  • Horizon 7 version 7.13 or later.
  • Enable biometric authentication in Connection Server. For information, see "Configure Biometric Authentication" in the Horizon 8 Administration document.
  • The Connection Server instance must present a valid root-signed certificate to Horizon Client.
Horizon Client requirements
  • Set the certificate checking mode to Never connect to untrusted servers or Warn before connecting to untrusted servers. For information about setting the certificate checking mode, see Set the Certificate Checking Mode.
  • Enable Face ID by tapping the Face ID (face) icon in the Password text box on the server login window. After you successfully log in, your Active Directory credentials are stored securely in the iOS device's Keychain.

You can use Face ID with smart card authentication and as part of two-factor authentication with RSA SecurID and RADIUS authentication. If you use Face ID with smart card authentication, Horizon Client connects to the server after you enter your PIN and the Face ID login window does not appear.