--- title: Authentication nodes configuration reference description: This page covers the configuration of the authentication nodes that are built into AM. component: pingam version: 7.4 page_id: pingam:am-authentication:auth-node-configuration-hints canonical_url: https://docs.pingidentity.com/pingam/7.5/am-authentication/auth-node-configuration-hints.html llms_txt: https://docs.pingidentity.com/pingam/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md keywords: ["Authentication", "Nodes & Trees", "Setup & Configuration"] page_aliases: ["authentication-guide:auth-node-configuration-hints.adoc"] superseded_by: https://docs.pingidentity.com/pingam/7.5/am-authentication/auth-node-configuration-hints.html section_ids: basic-authn-nodes: Basic authentication nodes multifactor-authn-nodes: Multi-factor authentication nodes risk-authn-nodes: Risk management authentication nodes behavioral-authn-nodes: Behavioral authentication nodes contextual-authn-nodes: Contextual authentication nodes federation-authn-nodes: Federation authentication nodes identity-authn-nodes: Identity management authentication nodes utility-authn-nodes: Utility authentication nodes thing-auth-nodes: Thing authentication nodes uncategorized-auth-nodes: Uncategorized authentication nodes --- # Authentication nodes configuration reference This page covers the configuration of the authentication nodes that are built into AM. | | | | - | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | | Additional authentication nodes are available from the [Ping Identity Marketplace](https://marketplace.pingone.com/browse?products=pingAm\&contentType=journeyNodes). | ## Basic authentication nodes Use the following nodes for basic authentication tasks, such as collecting usernames and passwords: * [Data Store Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/data-store-decision.html) * [Failure node](https://docs.pingidentity.com/auth-node-ref/7.4/failure.html) * [Kerberos node](https://docs.pingidentity.com/auth-node-ref/7.4/self-managed/kerberos.html) * [LDAP Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/ldap-decision.html) * [Password Collector node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/password-collector.html) * [Success node](https://docs.pingidentity.com/auth-node-ref/7.4/success.html) * [Username Collector node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/username-collector.html) * [Zero Page Login Collector node](https://docs.pingidentity.com/auth-node-ref/7.4/zero-page-login-collector.html) ## Multi-factor authentication nodes Use the following nodes to configure trees with multi-factor authentication capabilities, such as web authentication and push authentication: * [Combined MFA Registration node](https://docs.pingidentity.com/auth-node-ref/7.4/combined-mfa-registration.html) * [Device Binding node](https://docs.pingidentity.com/auth-node-ref/7.4/device-binding.html) * [Device Binding Storage node](https://docs.pingidentity.com/auth-node-ref/7.4/device-binding-storage.html) * [Device Signing Verifier node](https://docs.pingidentity.com/auth-node-ref/7.4/device-signing-verifier.html) * [Get Authenticator App node](https://docs.pingidentity.com/auth-node-ref/7.4/get-authenticator-app.html) * [HOTP Generator node](https://docs.pingidentity.com/auth-node-ref/7.4/hotp-generator.html) * [MFA Registration Options node](https://docs.pingidentity.com/auth-node-ref/7.4/mfa-registration-options.html) * [OATH Device Storage node](https://docs.pingidentity.com/auth-node-ref/7.4/oath-device-storage.html) * [OATH Registration node](https://docs.pingidentity.com/auth-node-ref/7.4/oath-registration.html) * [OATH Token Verifier node](https://docs.pingidentity.com/auth-node-ref/7.4/oath-token-verifier.html) * [Opt-out Multi-Factor Authentication node](https://docs.pingidentity.com/auth-node-ref/7.4/opt-out-multi-factor.html) * [OTP Collector Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/otp-collector-decision.html) * [OTP Email Sender node](https://docs.pingidentity.com/auth-node-ref/7.4/otp-email-sender.html) * [OTP SMS Sender node](https://docs.pingidentity.com/auth-node-ref/7.4/otp-sms-sender.html) * [Push Registration node](https://docs.pingidentity.com/auth-node-ref/7.4/push-registration.html) * [Push Result Verifier node](https://docs.pingidentity.com/auth-node-ref/7.4/push-result-verifier.html) * [Push Sender node](https://docs.pingidentity.com/auth-node-ref/7.4/push-sender.html) * [Push Wait node](https://docs.pingidentity.com/auth-node-ref/7.4/push-wait.html) * [Recovery Code Collector Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/recovery-code-collector-decision.html) * [Recovery Code Display node](https://docs.pingidentity.com/auth-node-ref/7.4/recovery-code-display.html) * [WebAuthn Authentication node](https://docs.pingidentity.com/auth-node-ref/7.4/webauthn-auth.html) * [WebAuthn Device Storage node](https://docs.pingidentity.com/auth-node-ref/7.4/webauthn-device-storage.html) * [WebAuthn Registration node](https://docs.pingidentity.com/auth-node-ref/7.4/webauthn-registration.html) ## Risk management authentication nodes Use the following nodes to examine the perceived risk associated to the authentication and act on it: * [Account Active Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/account-active-decision.html) * [Account Lockout node](https://docs.pingidentity.com/auth-node-ref/7.4/account-lockout.html) * [Auth Level Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/auth-level-decision.html) * [CAPTCHA node](https://docs.pingidentity.com/auth-node-ref/7.4/captcha.html) * [Legacy CAPTCHA node](https://docs.pingidentity.com/auth-node-ref/7.4/legacy-captcha.html) * [Modify Auth Level node](https://docs.pingidentity.com/auth-node-ref/7.4/modify-auth-level.html) ## Behavioral authentication nodes Use the following nodes to adjust the behavior of authentication trees: * [Increment Login Count node](https://docs.pingidentity.com/auth-node-ref/7.4/increment-login-count.html) * [Login Count Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/login-count-decision.html) ## Contextual authentication nodes Use the following nodes to authenticate with a digital certificate, change the flow, or set a cookie based on the authentication context: * [Certificate Collector node](https://docs.pingidentity.com/auth-node-ref/7.4/self-managed/certificate-collector.html) * [Certificate User Extractor node](https://docs.pingidentity.com/auth-node-ref/7.4/self-managed/certificate-user-extractor.html) * [Certificate Validation node](https://docs.pingidentity.com/auth-node-ref/7.4/self-managed/certificate-validation.html) * [Cookie Presence Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/cookie-presence-decision.html) * [Device Geofencing node](https://docs.pingidentity.com/auth-node-ref/7.4/device-geofencing.html) * [Device Location Match node](https://docs.pingidentity.com/auth-node-ref/7.4/device-profile-location-match.html) * [Device Match node](https://docs.pingidentity.com/auth-node-ref/7.4/device-match.html) * [Device Profile Collector node](https://docs.pingidentity.com/auth-node-ref/7.4/device-profile-collector.html) * [Device Profile Save node](https://docs.pingidentity.com/auth-node-ref/7.4/device-profile-save.html) * [Device Tampering Verification node](https://docs.pingidentity.com/auth-node-ref/7.4/device-tampering-verification.html) * [Persistent Cookie Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/persistent-cookie-decision.html) * [Set Custom Cookie node](https://docs.pingidentity.com/auth-node-ref/7.4/set-custom-cookie.html) * [Set Persistent Cookie node](https://docs.pingidentity.com/auth-node-ref/7.4/set-persistent-cookie.html) ## Federation authentication nodes Use the following nodes to configure trees with federation capabilities, such as OAuth 2.0, social authentication, and account provisioning: * [OAuth 2.0 node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/oauth2.html) * [OpenID Connect node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/oidc.html) * [OIDC ID Token Validator node](https://docs.pingidentity.com/auth-node-ref/7.4/oidc-idtoken-validator.html) * [Provision Dynamic Account node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/provision-dynamic-account.html) * [Provision IDM Account node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/provision-IDM-account.html) * [SAML2 Authentication node](https://docs.pingidentity.com/auth-node-ref/7.4/saml2.html) * [Social Facebook node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/social-facebook.html) * [Social Google node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/social-google.html) * [Social Ignore Profile node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/social-ignore-profile.html) * [Social Provider Handler node](https://docs.pingidentity.com/auth-node-ref/7.4/social-provider-handler.html) * [Write Federation Information node](https://docs.pingidentity.com/auth-node-ref/7.4/write-federation-information.html) ## Identity management authentication nodes Use the following nodes to perform identity management during an authentication tree flow, such as mapping anonymous users to a session. * [Accept Terms and Conditions node](https://docs.pingidentity.com/auth-node-ref/7.4/accept-terms-and-conditions.html) * [Attribute Collector node](https://docs.pingidentity.com/auth-node-ref/7.4/attribute-collector.html) * [Attribute Present Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/attribute-present-decision.html) * [Attribute Value Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/attribute-value-decision.html) * [Consent Collector node](https://docs.pingidentity.com/auth-node-ref/7.4/consent-collector.html) * [Create Object node](https://docs.pingidentity.com/auth-node-ref/7.4/create-object.html) * [Create Password node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/create-password.html) * [Display Username node](https://docs.pingidentity.com/auth-node-ref/7.4/display-username.html) * [Identify Existing User node](https://docs.pingidentity.com/auth-node-ref/7.4/identify-existing-user.html) * [KBA Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/kba-decision.html) * [KBA Definition node](https://docs.pingidentity.com/auth-node-ref/7.4/kba-definition.html) * [KBA Verification node](https://docs.pingidentity.com/auth-node-ref/7.4/kba-verification.html) * [Pass-through Authentication node](https://docs.pingidentity.com/auth-node-ref/7.4/passthrough-authentication.html) * [Patch Object node](https://docs.pingidentity.com/auth-node-ref/7.4/patch-object.html) * [Platform Password node](https://docs.pingidentity.com/auth-node-ref/7.4/platform-password.html) * [Platform Username node](https://docs.pingidentity.com/auth-node-ref/7.4/platform-username.html) * [Profile Completeness Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/profile-completeness-decision.html) * [Query Filter Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/query-filter-decision.html) * [Required Attributes Present node](https://docs.pingidentity.com/auth-node-ref/7.4/required-attributes-present.html) * [Select Identity Provider node](https://docs.pingidentity.com/auth-node-ref/7.4/select-identity-provider.html) * [Terms and Conditions Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/terms-and-conditions-decision.html) * [Time Since Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/time-since-decision.html) ## Utility authentication nodes Use the following nodes to perform various tasks during the authentication flow: * [Data Store Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/agent-data-store-decision.html) * [Anonymous Session Upgrade node](https://docs.pingidentity.com/auth-node-ref/7.4/anonymous-session-upgrade.html) * [Anonymous User Mapping node](https://docs.pingidentity.com/auth-node-ref/7.4/anonymous-user-mapping.html) * [Choice Collector node](https://docs.pingidentity.com/auth-node-ref/7.4/choice-collector.html) * [Configuration Provider node](https://docs.pingidentity.com/auth-node-ref/7.4/config-provider.html) * [Email Suspend node](https://docs.pingidentity.com/auth-node-ref/7.4/email-suspend.html) * [Email Template node](https://docs.pingidentity.com/auth-node-ref/7.4/email-template.html) * [Failure URL node](https://docs.pingidentity.com/auth-node-ref/7.4/failure-url.html) * [Get Session Data node](https://docs.pingidentity.com/auth-node-ref/7.4/get-session-data.html) * [Inner Tree Evaluator node](https://docs.pingidentity.com/auth-node-ref/7.4/inner-tree-evaluator.html) * [Message node](https://docs.pingidentity.com/auth-node-ref/7.4/message.html) * [Meter node](https://docs.pingidentity.com/auth-node-ref/7.4/meter.html) * [Page node](https://docs.pingidentity.com/auth-node-ref/7.4/page.html) * [Polling Wait node](https://docs.pingidentity.com/auth-node-ref/7.4/polling-wait.html) * [Query Parameter node](https://docs.pingidentity.com/auth-node-ref/7.4/query-parameter.html) * [Register Logout Webhook node](https://docs.pingidentity.com/auth-node-ref/7.4/register-logout-webhook.html) * [Remove Session Properties node](https://docs.pingidentity.com/auth-node-ref/7.4/remove-session-properties.html) * [Retry Limit Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/retry-limit-decision.html) * [Scripted Decision node](https://docs.pingidentity.com/auth-node-ref/7.4/scripted-decision.html) * [Set Session Properties node](https://docs.pingidentity.com/auth-node-ref/7.4/set-session-properties.html) * [State Metadata node](https://docs.pingidentity.com/auth-node-ref/7.4/state-metadata.html) * [Success URL node](https://docs.pingidentity.com/auth-node-ref/7.4/success-url.html) * [Timer Start node](https://docs.pingidentity.com/auth-node-ref/7.4/timer-start.html) * [Timer Stop node](https://docs.pingidentity.com/auth-node-ref/7.4/timer-stop.html) ## Thing authentication nodes Use the following nodes to perform various tasks related to authenticating IoT things: * [Authenticate Thing node](https://docs.pingidentity.com/auth-node-ref/7.4/self-managed/authenticate-thing.html) * [Register Thing node](https://docs.pingidentity.com/auth-node-ref/7.4/self-managed/register-thing.html) ## Uncategorized authentication nodes * [Debug node](https://docs.pingidentity.com/auth-node-ref/7.4/am-only/debug.html)