---
title: KBA Verification node
description: Presents KBA questions to the user, collects answers to those questions, and verifies the input against the user's stored answers.
component: auth-node-ref
version: latest
page_id: auth-node-ref::kba-verification
canonical_url: https://docs.pingidentity.com/auth-node-ref/latest/kba-verification.html
keywords: ["Nodes & Trees", "Journeys", "Authentication"]
page_aliases: ["auth-node-kba-verification.adoc"]
superseded_by: https://docs.pingidentity.com/auth-node-ref/latest/kba-verification.html
section_ids:
  availability: Availability
  configuration: Configuration
---

# KBA Verification node

Presents KBA questions to the user, collects answers to those questions, and verifies the input against the user's stored answers.

Use this node for additional authentication when resetting a forgotten password or username.

To set the number of KBA questions, edit Configure > Security Questions > Questions > Number in the IDM admin UI.

## Availability

| Product                               | Available? |
| ------------------------------------- | ---------- |
| PingOne Advanced Identity Cloud       | Yes        |
| PingAM (self-managed)                 | Yes 1      |
| Ping Identity Platform (self-managed) | Yes        |

1 This functionality requires that you configure AM as part of a [Ping Identity Platform deployment](https://docs.pingidentity.com/platform/8.1/sample-setup/).

## Configuration

| Property           | Usage                                                                                           |
| ------------------ | ----------------------------------------------------------------------------------------------- |
| KBA Attribute      | The managed object attribute in which KBA questions and answers are stored.                     |
| Identity Attribute | The attribute used to identify the managed object in the underlying identity service (PingIDM). |