PingID End User Guide

Using Apple Mac Touch ID for authentication with PingID

You can use your Apple Mac device with Touch ID for secure access your account and apps when using a web browser with PingID authentication. To set up your Apple Mac Touch ID device for secure authentication with PingID, you need to register or 'pair' your device with your account.

If your Mac machine supports FIDO2 platform biometrics, after pairing it with your account you can use it to access your account or apps through a web browser.

Do not confuse biometric web authentication for Mac with the PingID mobile app, which also uses fingerprint or face authentication.

  • PingID mobile app: Use PingID mobile app to authenticate when you access your account from various devices. Requires you to install PingID mobile app on your mobile device, and to pair it with your account.

  • Apple Mac Touch ID: Authenticate using your Mac device’s built-in biometrics, when signing on to your account, without downloading an app. You can only sign on to your account from the same device with which you want to authenticate.

You can use biometric web authentication through Touch ID only to authenticate your account from the same Touch ID device you use to access your account.

  • Web only

Pairing your Mac Touch ID device

To set up your Apple Mac machine for secure authentication, you need to register or 'pair' your Mac Touch ID device with PingID.

Before you begin

  • Ensure that your Mac device has Touch ID and supports FIDO2 platform biometrics.

  • Set up Touch ID biometrics sign on for your machine, such as registering your fingerprints. Follow the manufacturer’s guidelines to do so.

  • Ensure you are using a browser that supports the use of FIDO2 platform biometrics, such as Google Chrome or Safari, and that you have the latest version of the browser.

    Safari browser for Touch ID authentication requires MacOS Big Sur or later.

  • Touch ID FIDO2 authentication is currently browser-specific. The browser that you use to set up your device must be the same browser you use to authenticate. For example, if you set up your Touch ID FIDO2 device using a Safari browser, you will only be able to authenticate with that Touch ID FIDO2 device on a Safari browser. If you want the option to authenticate using a different browser, you must pair the device through the browser separately.

About this task

An image showing the process of setting up and pairing Touch ID authentication to your account.

Steps

  1. From your Mac machine, sign on to your account, and when you see the registration window, click Start.

    A screen capture of the Registration window showing the Start button.

    You’ll see the Add a New Device window, showing the Touch ID icon.

    A screen capture of the Add New Device window showing device options available for you to add.

  2. In the Add a New Device window, click Touch ID.

    If the Authenticate using Windows Hello option does not appear in the list, see Troubleshooting FIDO2 biometrics.

    Result:

    You are prompted to authenticate.

    A screen capture showing the Authentication screen. with a message prompting you to authenticate using Touch ID.

  3. Use your Mac device to validate your identity, such as using your fingerprint.

    • Make sure the Alternative Authentication browser window is the active window.

    • If you see a message asking if you permit your device to communicate with the biometrics device, select Allow or Yes to continue. The message might differ depending on the browser you are using.

    Result:

    A green Authenticated message with a check mark appears, indicating your device pairing is successful, and you are automatically signed on to your account or app.

Next steps

The next time you sign on to your account or application, follow the prompt to authenticate using your biometrics device. For information, see Authenticating with PingID using Apple Mac Touch ID.