Managing a user’s devices and services
In environments that use multi-factor authentication (MFA), administrators can manage a user’s MFA devices and service from the Users page.
About this task
From the Users page, you can remove a device, enable or disable a device, and bypass an authentication service. For example, you can bypass secondary authentication for a specified amount of time if a user loses or damages the MFA device that is paired with PingOne.
Steps
-
Go to Directory → Users.
-
Locate the user you want to edit. You can browse or search for users.
-
Click the user entry to open the user details panel.
-
Click Services and then Authentication.
-
Do one or more of the following:
Choose from:
-
To change the default device, in the Methods and Devices section, locate the appropriate authentication method. Click the More Options (⋮) icon and then click Make primary.
-
To show when the device was paired, locate the appropriate authentication method in the Methods and Devices section.
-
To unpair a device, in the Methods and Devices section, locate the appropriate authentication method. Click the More Options (⋮) icon and then click Unpair.
-
To block a device, in the Methods and Devices section, locate the appropriate authentication method. Click the More Options (⋮) ivon and then click Block. After you block a device, the Block option in the menu is replaced with an Unblock option.
-
To bypass MFA:
-
To bypass MFA for SSO: In the Multi-Factor Authentication section, click Allow MFA bypass and then in the Bypass modal, select the bypass duration and click Bypass.
The bypass time remaining and a Resume link are shown. Click Resume to resume MFA for the selected user.
-
(Workforce only) To disable a specific service, in the Integrations section, locate the appropriate service. Click the More Options (⋮) icon and then click Disable.
-
(Workforce only) To bypass a specific service, in the Integrations section. locate the appropriate service. Click the More Options (⋮) icon and then click Bypass. In the list, select the duration to bypass the service. After the specified time elapses, PingOne resumes the service automatically.
-
-
To configure PingID settings, click Configure Now. Learn more about PingID settings in PingID User Life Cycle Management in the PingID documentation.
-
-
Click Save.