---
title: Configuring the PingID enrollment settings
description: Customize the PingID enrollment experience.
component: pingid
page_id: pingid:pingid_service_management:pid_configuring_enrollment_settings
canonical_url: http://docs.pingidentity.com/pingid/pingid_service_management/pid_configuring_enrollment_settings.html
revdate: January 29, 2024
section_ids:
  steps: Steps
---

# Configuring the PingID enrollment settings

Customize the PingID enrollment experience.

## Steps

1. Sign on to the admin console.

2. Go to **Setup → PingID → Configuration**.

3. In the **Enrollment** section:

   ![A screen capture of the Enrollment section in the Configuration window.](_images/oxz1564020529565.png)

   1. In the **Mandatory Enrollment Date** field, select a final date for your users to enroll for the PingID service.

      Before this date, users can click **Not Now** to skip the enrollment process and still sign on to the service. After this date, the **Not Now** button is not available. Users must first enroll in PingID to sign on.

      |   |                                                                                 |
      | - | ------------------------------------------------------------------------------- |
      |   | Entering a past date will force users to enroll with PingID upon first sign on. |

   2. In the **Self-Enrollment During Authentication** section, permit or disable end-user self-enrollment for all PingID services on their first authentication.

      The default selection is **Enabled**. This option allows the organization to implement customized business logic on first authentications.

      |   |                                                                                                                                                                                                                                                                                                                                     |
      | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
      |   | When self-enrollment is **Disabled**, users who are not registered for at least one authentication method will receive an error screen on their first authentication attempt and will not be able to complete authentication and self-enrollment.![An error screen while authenticating with PingID.](_images/ebq1564020530225.png) |

      To reduce confusion when disabling self-enrollment, enter an appropriate message in the **Admin Message** field, as shown in the following example.

      `New users should register at the following link: <Registration URL>. For other support issues, contact the help desk.`

      Before disabling self-enrollment, we recommended that you use a mechanism to trap the error status, and apply the customized logic. Develop this customization using PingID APIs. For more information, see [The PingID API](https://apidocs.pingidentity.com/pingid-api/guide/pingid-api/).

   3. **Enforce Policy evaluation after new device registration** - this option ensures that in situations where users without a paired device attempt to access an application, the relevant authentication policies for the application will be applied in order to control access to the application after the user has successfully paired their device.

4. Click **Save**.