Before you begin
To complete this tutorial, refer to the prerequisites in this section.
The tutorial also requires a configured server.
Compatibility
- PingOne
-
-
Your PingOne instance must have DaVinci enabled.
-
- DaVinci
-
-
Your DaVinci flow uses the PingOne MFA Connector.
-
You have an MFA policy in PingOne configured to only use the following one-time passcode methods:
-
Email
-
SMS
-
Voice
-
-
Configuring strong authentication (MFA) methods in PingOne
In this section, you configure PingOne to be able to authenticate users with one-time password methods supported by the Ping SDKs.
Select one or more of the OTP delivery methods below for instructions on configuring them in PingOne:
Configuring an MFA policy to use one-time passcodes
After configuring the OTP delivery methods you must create an MFA policy in PingOne. An MFA policy configures the relevant settings for the authentication methods that you want to enable.
Learn more in Configuring an MFA policy for strong authentication.
Configuring DaVinci Flows for one-time passcodes
After configuring OTP delivery methods and creating an MFA policy, the next step is to configure a DaVinci flow to display buttons in your app so that users can choose which OTP delivery method to use.
Configuring DaVinci Forms for one-time passcodes
Complete the following steps to integrate one-time passcodes with PingOne using DaVinci Forms.
Creating a DaVinci Form
-
Create a form to display your selected external identity providers.
PingOne includes a number of prebuilt templates that you can modify as required.
-
To add one-time passcode delivery methods to the form:
-
From the Toolbox tab, drag either of the following components onto your form:
- MFA Device Selection - Authentication
-
Use this component when users are signing in to the system with an existing account, and have previously registered their email or phone number.
- MFA Device Selection - Registration
-
Use this component when users are registering an account. The next step in the flow would be to ask for their email address or phone number.
Figure 1. Adding an MFA selection list to a form in PingOne.The form preview area and configuration panel for the MFA components list all MFA methods.
The actual list displayed to users is limited by the MFA policy you created earlier.
-
-
Save your changes.
Learn more in Creating a form in the PingOne documentation.
Adding a form to a DaVinci flow
When you have created your MFA option forms, you must now include them as part of your DaVinci flow.
-
Add the forms you created to display OTP delivery options to a flow by using the PingOne Forms connector.
Figure 2. Example of a Forms Connector in a DaVinci flow. -
Save your changes.
Configuring a DaVinci flow to be launched by the Ping SDKs
Now that your DaVinci flow is configured to display your OTP delivery methods you must configure PingOne so that you can launch the flow by using the Ping SDKs.
This involves performing the following high-level steps:
-
Checking that your DaVinci flow uses only compatible connectors and fields.
-
Creating an application in DaVinci to connect PingOne to the DaVinci flow.
-
Creating an application in PingOne that the Ping SDKs can connect to and access the DaVinci application and its PingOne Flow Policy.
To learn how to complete the steps, refer to Launching a flow with a Ping SDK in the DaVinci documentation.