How to Configure PingOne Multi-Factor Authentication (MFA) for Windows Login Application in the PingOne Admin Console

This document provides step-by-step instruction to configure PingOne Multi-Factor Authentication (MFA) in PingOne Admin Console.

Introduction

PingOne provides authentication and MFA capabilities that can be integrated with Oloid applications. Configuring PingOne allows admin to establish a secure environment, create applications, and enable MFA for users.

Prerequisites

• You must have admin access to the PingOne Identity Administrator Console.
• You must have the redirect URLs from the Oloid team to complete the SSO configuration. If you don’t have the redirect URLs, contact Oloid Support.

Steps to Configure PingOne

Create Environment

Create Applications

Configure Application

Create User

Steps to Create Environment

1. Sign in to the Ping Identity Administrator Console using your PingOne account credentials.
2. Go to Environments > Environments+. The Create Environment screen is displayed.
3. Select Workforce Solution and click Next. The Workforce Solution page is displayed.
4. Click Next. The Services page is displayed.
5. Enter the Trial Environment Name and click Finish. The Trial Environment is created and listed on the Environment list.
6. Click Created Trial Environment. The Environment details page is displayed.
7. Click Manage Environment. Environment is created successfully.

Steps to Create Application

1. On PingOne home page, go to Applications > Applications. The Applications page is displayed.
2. Click Application +. The Add Application page is displayed.
3. Do the following:
   1. Enter the Application Name.
   2. Select Worker.
   3. Click Save

The application is created successfully.

Steps to Configure the Application

1. Enable the Application toggle.
2. Setup the following tabs:
   1. Configure Roles Tab
   2. Configure the Resources Tab
   3. Setup Configuration Tab

Steps to Configure the Roles Tab

1. On Application detail page, click Roles > Grant Roles. The Available responsibilities tab is displayed.
2. Add the following roles from the Roles list.

   1. Environment Admin.

   2. Identity Data Admin.

      Note: Always click on Select All.

   3. Organization Admin.

   4. Click Save.

      

      The Roles added successfully.

      

Steps to Configure the Resources Tab

1. On Application detail page, click on Resources > Allowed Scopes Edit icon > select Email > Save. The Email is added in the allowed scopes list.

Steps to Setup the Configuration Tab

1. On Application detail page, go to Configuration > click Edit icon. The Edit Configuration page is displayed.
2. Do the following:
   1. Select Code as Response Type.
   2. On Grant Type select the following:

      1. Authorization Code.

         Note: PKCE Enforcement is set to Optional by default. Keep this setting as Optional.

      2. Client Credentials.

   3. Enter the Redirect URls.

      1. The redirected URLs are added for the Tenant Admin Portal and Oloid User Portal.

         Note: To add more redirect URL, click + Add to add another Sign-In Redirect URL field in this section.

         
   4. Click Save. The Application is configured Successfully.

Steps to Configure MFA Parameter in the Oloid Tenant Admin Portal

1. Click Overview and copy next to each of the following parameter and then add these values into the corresponding field in the Tenant Admin Portal.
   1. Environment ID.
   2. Client ID.
   3. Client Secret. To navigate the required fields, in the Tenant Admin Portal, go to User Profile Icon > Tenant Settings > Security > API Token > 3rd Party Tokens > PingOne Configuration for MFA, and enter the required parameter in the applicable fields.

Steps to Create User

1. Go to Directory > Users > Users + > Create User.

   

   The Add user page is displayed.

2. Do the following:

   1. Enter Username.

   2. Enter Email ID.

      Note: Select the checkbox to verify the mail ID. A verification email is sent to the entered email ID after the checkbox is selected.

   3. Enter Password or click Generate Password.

      Note: When click on Generate Password, a temporary password is generated.

3. Click Save.

   

   The user is added successfully.

   

4. On User detail, click API and copy the ID value. Use this ID in the Ping ID field under User Details in the Tenant Admin Portal.

   

   To navigate the Ping ID field, on Tenant Admin Portal, go to Directory > Users > Select User > Other Identifier section, enter the ID in the Ping ID field.

   

   The ID added successfully.

Steps to Setup the Multi Factor Authentication

1. Go to Applications > PingOne Self-Service - MyAccount.

   

   PingOne Self-Service - MyAccount page is displayed.

2. Copy the Home Page URL and open it in a web browser.

   

   The PingOne Identity Screen is displayed.

3. Do the following:

   1. Enter UserName.

   2. Enter Password.

      Note: Use the password that you added/generated when creating the user account.

   3. Click Sign On.

      

      The Change Password screen is displayed.

4. Do the following:

   1. Enter the Current Password in the Current Password field.

      Note: Use the password that you added/generated when creating the user account.

   2. Enter New Password in the New Password field.

   3. Enter the Password in the Verify New Password field.

   4. Click Save.

      

      The password is added successfully, and the Verification code screen is displayed.

5. Do the following:

   1. Enter the Verification Code.

      Note: The verification code is sent to your registered email address.

   2. Click Verify.

      

      The Pingone User Profile page is displayed.

6. Go to Authentication tab > click Add Method.

   

   The Select Method screen is displayed.

7. Select PingID Mobile Application.

   

   Scan QR Code screen is displayed.

8. Open the PingOne application from your device and scan the QR Code.

   Note: Make sure that PingOne application is installed in your device.

   The PingOne MFA setup is configured successfully.

   

Related Articles

How to Configure PingOne Multi Factor Authentication (MFA) for Windows Login Application in the Tenant Admin Portal