---
title: CIBA setup
description: When a client application sends a Client Initiated Backchannel Authentication (CIBA) request to PingFederate, the PingOne MFA CIBA Authenticator allows PingFederate to initiate an out-of-band authentication request using PingOne MFA.
component: pingone
page_id: pingone:pingone_mfa_integration_kit:pf_p1_mfa_ik_ciba_setup
canonical_url: https://docs.pingidentity.com/integrations/pingone/pingone_mfa_integration_kit/pf_p1_mfa_ik_ciba_setup.html
revdate: June 15, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
---

# CIBA setup

When a client application sends a Client Initiated Backchannel Authentication (CIBA) request to PingFederate, the PingOne MFA CIBA Authenticator allows PingFederate to initiate an out-of-band authentication request using PingOne MFA.

## About this task

By completing the steps below, you can show CIBA prompts on the mobile device that a user has paired with their PingOne MFA account.

For general information about CIBA, see [Client Initiated Backchannel Authentication (CIBA)](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/pf_ciba.html) in the PingFederate documentation. Note that the CIBA Authenticator mentioned on that page is different from the PingOne MFA CIBA Authenticator.

For detailed information about the following steps, see [CIBA request flow](pf_p1_mfa_ik_ciba_request_flow.html) and [CIBA prompt customizations](pf_p1_mfa_ik_ciba_prompt_customizations.html).

|   |                                                                                |
| - | ------------------------------------------------------------------------------ |
|   | The CIBA setup section is optional and independent from the MFA setup section. |

## Steps

1. In PingOne, complete the steps in [Creating a CIBA authentication policy in PingOne](pf_p1_mfa_ik_creating_a_ciba_authentication_policy_p1.html).

2. In PingFederate, complete the steps in [Configuring a CIBA authenticator instance](pf_p1_mfa_ik_configuring_a_ciba_authenticator_instance.html).

3. In PingFederate, create a CIBA request policy as shown in [Managing CIBA request policies](https://docs.pingidentity.com/pingfederate/latest/administrators_reference_guide/help_cibapoliciesmanagementtasklet_cibapoliciesmanagementstate.html) in the PingFederate documentation.