The Beyond Identity Platform Authenticator for Windows and macOS supports customizable user verification dialog text. This allows organizations to tailor the instructions or messages shown to users during key verification steps.
Below are the platform-specific steps for configuring this feature on Windows and macOS.
Configuring the User Verification Dialog Text on Windows
The image below shows the appearance of the Windows user verification dialog, including an example of how the custom text is displayed. You can configure this dialog text using either the Windows Registry or theBIConfigure
command-line utility—both methods are functionally equivalent and fully interchangeable.
Option 1: Using the Windows Registry
Set the Verification Dialog Text via Registry
To set a custom message using the Windows Registry follow these steps:
-
Open the Registry Editor (
regedit.exe
). -
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies
-
If not already present, create the following subkeys:
BeyondIdentity\Authenticator
-
Inside the
Authenticator
key, add a new String Value named:VerifyText
-
Set the VerifyText value to your desired message (e.g., “Please verify your identity to continue.”).
-
Close the Registry Editor.
Clear the Verification Dialog Text via Registry
To reset the dialog text to the default follow these steps:
-
Open the Registry Editor.
-
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\BeyondIdentity\Authenticator
-
Delete the
VerifyText
string value. -
Close the Registry Editor.
Option 2: Using the BIConfigure Command-Line Utility
The BIConfigure
utility is installed with the Beyond Identity Authenticator and allows dialog text configuration via command line.
Setting the Dialog Text Using BIConfigure
You can configure the user verification dialog text using the BIConfigure
utility. The command path depends on whether the Beyond Identity Platform Authenticator was installed system-wide or just for a specific user.
For System-Wide Installations
Open a Command Prompt with Administrator privileges and run:
"C:\Program Files\BeyondIdentity\Tools\BIConfigure" --set-verify-text "Please verify it’s really you. Your biometric data will not be shared or captured during this process."
For User-Specific Installations
Open a Command Prompt with Administrator privileges and run:
"C:\Users\<username>\AppData\Local\Programs\BeyondIdentity\Tools\BIConfigure" --set-verify-text "Please verify it’s really you. Your biometric data will not be shared or captured during this process."
Note: Replace
<username>
with the actual Windows username for the user you want to configure.
Retrieving the Current Dialog Text
To check the current user verification dialog text, use theBIConfigure
utility. Run the appropriate command based on your installation type:
For System-Wide Installations
"C:\Program Files\BeyondIdentity\Tools\BIConfigure" --get-verify-text
For User-Specific Installations
"C:\Users\<username>\AppData\Local\Programs\BeyondIdentity\Tools\BIConfigure" --get-verify-text
Note: Replace
<username>
with the actual Windows username.
Clearing the Dialog Text
To reset the user verification dialog text to the default message, use the following command based on your installation:
For System-Wide Installations
"C:\Program Files\BeyondIdentity\Tools\BIConfigure" --clear-verify-text
For User-Specific Installations
"C:\Users\<username>\AppData\Local\Programs\BeyondIdentity\Tools\BIConfigure" --clear-verify-text
Example Behavior
Once the custom text is set, whether through the Registry or the BIConfigure command-line tool, it will automatically appear the next time the user verification dialog is triggered.
This means users will immediately see the updated message during their next authentication step, helping to ensure consistent and clear communication based on your organization's needs (refer to the image below).
Managing User Verification Dialog Text at Scale
Using MDM on Windows
Both the Registry and BIConfigure methods are fully compatible with common Mobile Device Management (MDM) solutions such as Microsoft Intune, SCCM, or other enterprise deployment tools.
This enables IT administrators to centrally configure or update the user verification dialog text across all Windows devices in the organization, ensuring consistent messaging with minimal manual effort.
Configuring the User Verification Dialog Text on macOS
On macOS, the user verification dialog text can be customized using the included BIConfigure
command-line utility. This allows administrators to define the messaging users see during identity verification prompts. Follow the steps below.
Set the Dialog Text on macOS
-
Open a terminal on the macOS device.
-
Run the following command with
sudo
privileges:
sudo "/Applications/Beyond Identity.app/Contents/Resources/BIConfigure" --set-verify-text "<your custom message>"
Example:
sudo "/Applications/Beyond Identity.app/Contents/Resources/BIConfigure" --set-verify-text "verify it’s really you. Your biometric data will not be shared or captured during this process"
You’ll be prompted to enter your admin password. Once executed, the Authenticator will restart and the new dialog text will be applied.
Note:
On macOS, the operating system automatically formats the dialog. Your message will be:
Preceded by: “Beyond Identity is trying to”
Appended with a period.
So the result of the example above will appear to the user as:
“Beyond Identity - rolling is trying to verify it’s really you. Your biometric data will not be shared or captured during this process.”
Retrieving the Dialog Text on macOS
To view the currently configured user verification dialog text on a macOS device, use the BIConfigure
utility:
"/Applications/Beyond Identity.app/Contents/Resources/BIConfigure" --get-verify-text
Example Output:
verify it’s really you. Your biometric data will not be shared or captured during this process
This command can be run manually or deployed remotely through an MDM solution such as Jamf or Kandji.
Clearing the Dialog Text on macOS
To remove the custom verification message and restore the system default, run:
sudo "/Applications/Beyond Identity.app/Contents/Resources/BIConfigure" --clear-verify-text
Once executed, the Authenticator will automatically restart, and the default dialog text will be reinstated.
Comments
0 comments
Please sign in to leave a comment.