See /etc/pam.d/sudo_local.template.

# sudo_local: local config file which survives system update and is included for sudo
# uncomment following line to enable Touch ID for sudo
#auth       sufficient     pam_tid.so

Copy it to sudo_local and uncomment the auth line to enable Touch ID for sudo.