UPDATE - 13. Feb. 2024: From What’s new for enterprise in macOS Sonoma: Touch ID can be allowed for sudo with a configuration that persists across software updates using /etc/pam.d/sudo_local. See /etc/pam.d/sudo_local.template for details. This means the following steps will give you the result: sudo cp /etc/pam.d/sudo_local.template /etc/pam.d/sudo_local Remove the comment # from the 3. line. This should be the result: # sudo_local: local config file which survives system update and ...