The simple answer is that generally you don't, you first authenticate in some other way and then add biometrics (stored on the device) as an alternate means of

The simple answer is that generally you don't, you first authenticate in some other way and then add biometrics (stored on the device) as an alternate means of authentication. It displaces other methods as the day-to-day commonly used authentication, but not completely.