PingOne

Managing a user’s devices and services

In environments that use multi-factor authentication (MFA), administrators can manage a user’s MFA devices and service from the Users page.

You can remove a device, enable or disable a device, and bypass an authentication service. For example, you can bypass secondary authentication for a specified amount of time if a user loses or damages the MFA device that’s paired with PingOne.

Unpairing your last device or disabling MFA on your administrator account through the PingOne Self-Service - MyAccount app will block your ability to authenticate. You will need another administrator to re-enable your account or assist with device pairing.

Steps

  1. In the PingOne admin console, go to Directory > Users and browse or search for the user you want to edit.

  2. Click the user entry to open the user details panel.

  3. Click Services and then Authentication.

  4. Do one or more of the following:

    Choose from:

    • To change the default device, in the Methods and Devices section, locate the appropriate authentication method. Click the More Options (⋮) icon and then click Make primary.

    • To show when the device was paired, locate the appropriate authentication method in the Methods and Devices section.

    • To unpair a device, in the Methods and Devices section, locate the appropriate authentication method. Click the More Options (⋮) icon and then click Unpair.

    • To block a device, in the Methods and Devices section, locate the appropriate authentication method. Click the More Options (⋮) icon and then click Block. After you block a device, the menu updates to show an Unblock option instead of Block.

    • To bypass MFA:

      • To bypass MFA for single sign-on (SSO): In the Multi-Factor Authentication section, click Allow MFA bypass and then in the Bypass modal, select the bypass duration and click Bypass.

        The bypass time remaining and a Resume link are shown. Click Resume to resume MFA for the selected user.

      • (Workforce only) To disable a specific service, in the Integrations section, locate the appropriate service. Click the More Options (⋮) icon and then click Disable.

      • (Workforce only) To bypass a specific service, in the Integrations section, locate the appropriate service. Click the More Options (⋮) icon and then click Bypass. In the list, select the duration to bypass the service. After the specified time elapses, PingOne resumes the service automatically.

    • To configure PingID settings, click Configure Now. Learn more about PingID settings in PingID User Life Cycle Management in the PingID documentation.

  5. Click Save.