Using an authenticator app for authentication with PingID
PingID allows you to use an external authenticator app of your choice, such as the Google authenticator app or the Microsoft authenticator app, to access your account with the added security of multi-factor authentication. To set up your authenticator app for secure authentication with PingID, you need to download the authenticator app and then register or 'pair' it with your account.
Pairing creates a trust between your authenticator app and your account so that you can use it to authenticate during the sign-on process. This section describes how to pair your authenticator app with PingID.
You can use an authenticator app to access your account using a Web browser, to access your company’s VPN, or to access a Mac login machine.
-
Web or Mac
-
VPN
Pairing your authenticator app
Download an authenticator app and then register or 'pair' it with your account so that you can use it to authenticate with PingID.
Before you begin
Download and install the authenticator app that you want to use, such as Google Authenticator.
Steps
-
On your mobile device, download and install the authenticator app that you want to use, such as Google Authenticator.
-
Sign on to your account or app and when you see the registration window, click Start.
You’ll see the Add a New Device window showing the Authenticator icon.
-
In the Add a New Device window, click Authenticator.
Tap Authenticate using Face ID, even if your device only supports fingerprint authentication. You will be able to authenticate using your fingerprint.
Result:
The Authenticator Pairing window appears, showing the QR Pairing Code.
-
Open the authenticator app:
The steps might vary depending on the authenticator app you choose.
-
Create or add a new account.
-
Accept all permissions, if prompted, such as permission for the app to access your camera. Check the help files for your specific authenticator if needed.
-
From the authenticator app on your device, point your device at the QR code on your browser and scan it.
If you are unable to scan the QR code, on your mobile device tap Manual Pairing, referred to as a code or provided key, and enter the pairing key shown on the registration page.
Result:
A confirmation message appears on your authenticator app telling you that your account was added successfully and displays a new entry showing your account name and a one-time passcode (OTP).
-
-
In your browser, click Next, enter the OTP displayed on your authenticator app, and click Verify.
The passcode updates approximately every 30 seconds, and you can use it only one time.
Result:
After you authenticate, a green check mark appears confirming authentication, and you are redirected to the company protected browser-based service or app that you need to access.
-
The next time you sign on to your account or app, authenticate using the OTP generated by your authentication app.
Next steps
For information about how to authenticate with your authenticator app, see Authenticating with PingID using an authenticator app.
Pairing your authentication app (VPN)
Download an authenticator app and then register or 'pair' it with your account so that you can use it to securely access your VPN with PingID.
Before you begin
Download and install the authenticator app that you want to use, such as Google Authenticator.
Steps
-
From your web browser or application:
-
Sign on to your VPN with your username and password.
-
When prompted, install the PingID app.
-
In the Response field, enter
other
. Click Sign In. -
To set up your authenticator app, in the Response field, enter
authenticator
. Click Sign In.Result:
A pairing key generates and displays on-screen.
-
-
Open your authenticator app.
Depending on the authenticator app you choose, the steps might vary.
-
Create a new account and accept all permissions, if prompted.
-
Tap the option to enter a manual code, also called a code or provided key.
-
Enter the pairing key provided in step 1.
Result:
A confirmation message displays on your authenticator app confirming your account is added successfully. A new entry appears showing your account name and a one-time passcode (OTP).
-
-
On your web browser or application, in the Response field, enter the OTP. Click Sign In.
Result:
Pairing and authentication are complete, and you are signed on to your VPN.
Next steps
For more information about how to authenticate with your authenticator app, see Authenticating with PingID using an authenticator app.