That's perfectly normal. Android security policy prevents an app to lock the screen and then spoof the fp.
If the system finds out an app or an overlay locked the screen then asks for back up pin instead of the fingerprint.
There's no way to use fingerprint or iris to unlock the phone with an...