PingID Administration Guide

Installing PingID integration for Mac login using CLI

Install the PingID integration for Mac login using the command-line interface (CLI).

Before you begin

Adding any multi-factor authentication (MFA) is a procedure that carries the risk of being locked out of the machine.

  • Several verifications are done on the parameters supplied for the installation to minimize any locking. The PingID integration for Mac login permits recovery from a lockout scenario by restarting the machine in Single User Mode.

  • Ensure that the remote login option is enabled on the Mac to allow connection to the machine by SSH.

To install the PingID integration, you must have:

  • Administrator privileges on the target Mac machine.

  • A copy of the organization’s pingid.properties file. For instructions on how to download the relevant PingID properties file (with full or restricted permissions), see Managing the PingID properties file.

About this task

Installing the PingID integration from the command line is useful for deploying to multiple machines in batch mode.

To install the PingID Integration for Mac login using the CLI:

Steps

  1. On the PingID Downloads page, go to Integrations, and download the PingID package .pkg file for Mac login.

  2. Double-click the PingID-MacOS-Login<version>.dmg file to launch the setup wizard.

    Result:

    The installer opens.

    Ping ID for Mac login - initial screen

  3. Copy and paste the PingID.pkg and InstallPingID files to a convenient location.

  4. Download the PingID properties file to the location in step 3.

  5. Open a terminal session and change directory to where you copied the file in step 3.

  6. Optional: To see the available CLI help, run the ./InstallPingID --help command.

  7. Run the installation from a command prompt or create a script containing the required install command.

    Choose from:

    • Install using the pingid.properties file to supply parameter values.

      ./InstallPingID --orgSettingsFilePath /Users/admin/Downloads/pingid.properties [optional parameters]

    • Install without using the pingid.properties file. Supply the --orgAlias, --orgKey, --authenticatorAddress, --idpUrl, and --token parameter values on the command line.

      ./InstallPingID --orgAlias <organization alias string> --orgKey <organization key string> --authenticatorAddress <URL of PingID data center> --idpUrl <URL of the server used for PingID API requests> --token <API key identifier> [optional parameters]