PingFederate Server

Managing CIBA authenticators

Manage the Client Initiated Backchannel Authentication (CIBA) authenticators in PingFederate.

About this task

A CIBA authenticator is responsible for authenticating users through an out-of-band method.

You can use the PingFederate SDK to implement a custom solution. For more information, see the Javadoc for the OOBAuthPlugin interface, the SampleEmailAuthPlugin.java file for a sample implementation, and the SDK developer’s guide for build and deployment information.

The Javadoc for PingFederate and the sample implementation are in the <pf_install>/pingfederate/sdk directory.

Once deployed, you can create one or more instance configurations of the authenticator.

Steps

  • Go to Authentication → OAuth → CIBA Authenticators and create or select the instance you want to manage.

  • To manage the CIBA authenticator, choose from the following options.

    Option Description

    Configure a new instance

    Click Create New Instance

    Modify an existing instance

    Click the name of instance in the Instance Name column

    View the usage of an existing instance

    Click Check Usage in the Action column on the instance’s row

    Remove an existing instance

    Click Delete in the Action column on the instance’s row