Authentication nodes

Account Active Decision node

The Account Active Decision node determines whether the current account is both active and unlocked, and lets the journey make a decision, based on that check.

An account is considered locked under these conditions:

  • The status is inactive.

  • The status is active and a duration lockout is set on the account.

An account is considered unlocked under this condition:

  • The status is active and no duration lockout is set on the account.

The node determines whether the account has been locked through both persistent (physical) lockout and duration lockout.

Find more information in Account lockout.

Example

For progressive profiling, include this node after a Terms and Conditions Decision node. If the user has not accepted the latest version of the terms and conditions, evaluation takes them to a page that requires them to accept the current terms and conditions.

The Patch Object node stores the acceptance response in the underlying identity service (PingIDM) if the user accepts:

Storing acceptance of terms and conditions

Availability

Product Available?

PingOne Advanced Identity Cloud

Yes

PingAM (self-managed)

Yes

Ping Identity Platform (self-managed)

Yes

Inputs

The node reads the user’s identity from the shared state.

Implement a Platform Username node earlier in the journey.

Dependencies

This node has no dependencies.

Configuration

This node has no configurable properties.

Outputs

This node doesn’t write anything to the shared state.

Outcomes

  • True

    The journey follows this outcome path if the account is assessed to be active and unlocked.

  • False

    The journey follows this outcome path if the account is assessed to be inactive or locked.

Errors

If the node cannot read the identity of the account, it throws the following exception:

Failed to get the identity object