PingID Administration Guide

PingID general release notes (older releases)

New features and improvements in PingID implemented prior to 2021.

November 2023

New features and improvements in PingID implemented in November 2023.

November 21

New version of PingID integration for Windows login (version 2.10.2)

New PingID Integration for Windows login

October 2023

New features and improvements in PingID implemented in October 2023.

October 30

New version of PingID integration for Windows login - passwordless (version 1.5)

New PingID Integration for Windows login

October 9

Number matching details in the user code screen

Improved PingID

We’ve updated the UX text in the Use Code screen to improve clarity so that if a user chooses to use an OTP (one-time passcode) when authenticating, they retain the option to authenticate by number matching if required.

September 2023

New features and improvements in PingID implemented in September 2023.

September 26

New version of PingID Mobile app 1.38

New PingID mobile app

September 19

New version of PingID Integration Kit 2.26.

New PingID Integration kit for PingFederate

A new version of PingID Integration Kit 2.26 is released with a new version of PingID RADIUS PCV 3.0.4. For more information, see PingID Integration Kit 2.26 (September 19, 2023).

Intermittent enforcement of SMS and voice limits

Fixed STAGING-19252 PingID

We’ve fixed an issue that sometimes prevented the enforcement of SMS and voice limits.

September 18

New version of PingID integration for Windows login (version 2.10.1)

New PingID Integration for Windows login

Issue logging on to Windows login using a Security Key in AU region when offline

Fixed STAGING-17704 PingID

We’ve fixed an issue that was preventing Windows login users whose PingID regional data center is located in Australia (AU region) from authenticating using a Security Key when offline. This issue is fixed for all users after they successfully authenticate online at least once using their security key.

September 14

Device IP address subscription information included in PingID audit events

Improved PingID

The IP address of the accessing device is now included in the PingID audit event information that is reported through the PingOne subscription facility.

VPN/SSH policy syntax updated

Improved PingID

We’ve updated the name of the VPN/SSH policy in the admin portal to RADIUS PCV and SSH, for clarity. For details, see Configuring a RADIUS PCV and SSH access policy

September 12

Limit Push Notification rule update

Improved PingID

To improve clarity, we’ve updated the UI for the Limit Push Notifications rule. We’ve also updated our documentation to explain how the rule is implemented in more detail. For information see Configuring a limit push notifications rule.

August 2023

New features and improvements in PingID implemented in August 2023.

August 14

Issue scrolling down from Registration and Change Devices window

Fixed STAGING-19975 PingID

We’ve fixed an issue that was preventing users from scrolling down from the Registration window or the Change Devices window, when viewed from a web browser on a small screen.

August 2

New version of PingID Integration for Mac login (version 1.3.0)

New PingID Integration for Mac login

July 2023

New features and improvements in PingID implemented in July 2023.

July 26

Security key authentication failure when adding new Google account on Android

Fixed STAGING-20031 PingID

There were cases where PingID authentication with a security key failed when the user was trying to add a new Google account to their Android device. This issue has been fixed.

July 25

New version of PingID integration for Windows login - passwordless (version 1.4)

New PingID Integration for Windows login

July 18

SMS delivery code enhancement

Improved PingID

To avoid SMS delivery issues associated with the use of Long Codes (LC) in some US territories, and to improve resiliency, Ping Identity’s SMS service now uses short codes (SC) and Toll-Free Numbers (TFN) only.

July 17

Support ID added to general error messages

Improved PingID

To help the Ping Identity support team to identify the relevant log entries and troubleshoot customer issues more effectively, we’ve added a Support ID to all general error messages in PingID.

PingID user guide restructured

Improved PingID

We’ve restructured the PingID user guide to reflect the user journey - pairing and then authenticating with PingID. We’ve also streamlined the topic structure to focus on authentication methods, rather than platforms.

July 11

Support of FIDO2 security key device redirection with Windows RDP

Improved PingID

Windows login now supports FIDO2 security keys redirection when using Windows 10 Remote Desktop Protocol (RDP) or later.

June 2023

New features and improvements in PingID implemented in June 2023.

June 27

Number matching details added to the Use Code screen

Improved PingID

We’ve added details of the number required to complete a number-matching flow to the One-time passcode (OTP) screen. This can be helpful in the event that a user who is prompted to authenticate using number matching clicks the Use Code option before completing authentication, as they are still able to view the relevant number and complete the number-matching flow.

June 22

New version of PingID Integration Kit 2.25.

New PingID Integration kit for PingFederate

A new version of PingID Integration Kit 2.25 is released with a new version of PingID Adapter 2.14. For more information, see PingID Integration Kit 2.25 (June 22, 2023).

June 15

New version of PingID Mobile app 1.37

New PingID mobile app

For iOS changes, see Mobile app 1.37 (Jun 15, 2023) iOS.

For Android changes, see Mobile app 1.37 (June 15, 2023) Android.

June 8

Enhancements when connecting PingID and PingOne

Improved PingID

We’ve enhanced the process of connecting an existing PingID organization to a new PingOne environment:

  • Before starting the process of connecting PingID and PingOne, PingID now performs a verification check to ensure that the license for the relevant PingOne organization is valid, and is sufficient to support the number of PingID users.

    If the license is not valid, or the number of users required exceeds the number of users permitted by the organization’s PingOne license, the process is stopped. An audit message is included in the admin activity report in PingID. Customers should contact their support representative to extend their license if required, and then restart the connecting process.

  • New audit events are included in the admin activity report in PingID to enable Administrators to review the synchronization status and follow up in case of any possible failures.

June 6

New version of PingID integration for Windows login (version 2.10)

New PingID Integration for Windows login

Fixed STAGING-16966 PingID

Fixed an issue that was causing the Forgot your device? link to disappear from the authenticating screen, even when at least one authentication method was configured for backup authentication in the web portal, and the relevant rule action was configured in PingID policy.

May 2023

New features and improvements in PingID implemented in May 2023.

May 30

PingID User Guide standalone

Improved PingID

We’ve moved the PingID User Guide out of the PingID Administration Guide so that it is easier for end users to access. You can find it on the Read the Docs page here.You’ll also find a link to it at the end of the PingID Administration Guide.

May 22

DVORAK keyboard layout support for YubiKey (OTP)

Improved PingID

We’ve added support for the DVORAK keyboard layout when using Yubikey (OTP) devices. NOTE: The same keyboard layout used to register your device must be used when authenticating with that device.

May 18

Support for ECC algorithm with WebAuthn APIs for Windows Hello

Improved PingID

PingID now supports the ECC algorithm in TPM attestation, in addition to the RSA algorithm. NOTE: ECC public keys require Windows 11 22H2 or later.

May 3

New version of PingID Mobile app 1.36.1 (Android)

New PingID mobile app

May 2

New version of PingID desktop app 1.7.5

New PingID desktop app

April 2023

New features and improvements in PingID implemented in April 2023.

April 24

New version of PingID Mobile app 1.36

New PingID mobile app

For Android changes see Mobile app 1.36 (April 24, 2023) Android.

April 18

PingID Connector

Improved PingID

We’ve enhanced the PingID Connector to enable the user to enter their One-time Passcode (OTP) when triggering Multi-factor Authentication (MFA). It’s now possible for the user to enter a TOTP/HOTP-generated OTP when starting authentication using the Create Device Authentication endpoint.

Support for SMS and Voice calls to Kosovo

Improved PingID

We’ve added Kosovo to the list of countries that support one-time passcode SMS and Voice calls.

April 4

PingID policy Limit Push Notification rule issue

Fixed PID-13054 PingID

Fixed an issue that was preventing the Limit Push Notification rule from triggering in certain situations.

April 3

New version of PingID Mobile app 1.35

New PingID mobile app

For Android changes see Mobile app 1.35 (April 3, 2023) Android.

February 2023

New features and improvements in PingID implemented in February 2023.

February 28

Number matching authentication method

New PingID

We’ve added the ability to authenticate by displaying a number on the user’s accessing device and prompting the user to select the corresponding number in PingID mobile app.

This feature is supported on PingID mobile app 1.34 and later.

If your policy includes number matching as the sole authentication method, users running PingID mobile app 1.33 or earlier will not be able to authenticate.

Number matching can only be used for web-based authentication requests. It should not be used for CLI and text-based authentication.

February 21

Limit push notifications rule

New PingID

To reduce the likelihood of a user acknowledging a malicious push notification as part of an MFA fatigue attack, we’ve added a new rule that enables you to limit the number of push notifications the user can receive within a given time period. This rule appears under PingID policy settings and is available for Web authentication only.

For information see:

New version of PingID Integration Kit 2.24.

New PingID Integration kit for PingFederate

A new version of PingID Integration Kit 2.24 is released with a new version of PingID RADIUS PCV 3.0.3. For more information, see PingID Integration Kit 2.24 (February 21, 2023).

February 20

New version of PingID Mobile app 1.34

New PingID mobile app

February 14

New version of PingID Integration for Mac login (version 1.2)

New PingID Integration for Mac login

February 7

Versioning of PingID policies

Improved PingID

Policy collections are now assigned a version number to prevent policies from being modified simultaneously by multiple administrators. Each time the existing policies are modified, the version number is incremented. If the version number sent in an API request does not match the current version number, an error is returned. For details, see the documentation for the Web Authentication Policy API.

PingID language support

Improved PingID

PingID now supports the following additional languages:

  • Czech

  • Polish

  • Hungarian

January 2023

New features and improvements in PingID implemented in January 2023.

January 31

New version of PingID Integration Kit 2.23.

New PingID Integration kit for PingFederate

A new version of PingID Integration Kit 2.23 is released with a new version of PingID RADIUS PCV 3.0.2. For more information, see PingID Integration Kit 2.23 (January 31, 2023).

January 29

New version of PingID Mobile app 1.33

New PingID mobile app

January 23

New version of PingID desktop app 1.7.4

New PingID Desktop app

A new version of PingID desktop app 1.7.4 is released. For more information, see Desktop app 1.7.4 (January 23, 2023).

January 17

New version of PingID Integration Kit 2.22

New PingID Integration kit for PingFederate

A new version of PingID Integration Kit 2.22 is released with a new version of PingID Adapter 2.13.2. For more information, see PingID Integration Kit 2.22 (January 17, 2023).

January 9

New version of PingID Mobile app 1.32

New PingID mobile app

January 3

New version of PingID integration for Windows login (version 2.9)

New PingID Integration for Windows login

New version of PingID Integration Kit 2.21

New PingID Integration kit for PingFederate

A new version of PingID Integration Kit 2.21 is released with a new version of PingID Adapter 2.13.1. For more information, see PingID Integration Kit 2.21 (January 3, 2023).

New PingID connector flows

New PingID

Following the release of the new PingID DaVinci connector, we’ve added the following out-of-the-box flows:

For more information, see the PingID connector documentation.

December 2022

New features and improvements in PingID implemented in December 2022.

December 15

PingID connector

New PingOne

The new PingID connector is available. This connector includes an increased set capabilities and is based on the PingOne API, and replaces the previous PingID connector (now called PingID Legacy Connector). For information, see PingID connector.

User Detailed Status Reports expanded

Improved PingID

We’ve added the following new fields to theUser Detailed Status Report:

  • fidoBackupEligibility (boolean): Indicates whether the FIDO device (FIDO biometrics, or FIDO security key) supports credentials backup to the cloud.

  • fidoBackupState (boolean): Indicates whether the FIDO device credentials are backed up to the cloud.

For devices that are already paired with PingID, these fields are updated on the fly.

December 14

PingID Activity report FIDO2 metadata expanded

Improved PingID

We’ve expanded the metadata that relates to FIDO2 biometrics devices and security keys in the PingID Activity report, and improved the format in which it is presented.

December 13

New version of PingID Mobile app 1.31

New PingID mobile app

Support of PingID mobile app PIN code

New PingID

PingID now supports the use of a PIN code on the PingID mobile app. Admins can require PIN codes for devices that do not have a device PIN only, or for all devices. This feature is supported by PingID mobile app 1.31 or later. For information, see Configuring the PingID mobile app PIN.

Notify users of new PingID mobile app versions

New PingID

PingID now enables you to notify your users that a new version of PingID mobile app is available. You can make updates mandatory, or optional, and specify the minimum version from which users are notified that an update is available. This feature is supported by PingID mobile app 1.31 or later. For information, see Enabling PingID mobile app update notifications.

November 2022

New features and improvements in PingID implemented in November 2022.

November 29

New version of PingID Integration for Mac login (version 1.1.2)

New PingID Integration for Mac login

November 22

New version of PingID Integration Kit 2.20

New PingID Integration kit for PingFederate

A new version of PingID Integration Kit 2.20 is released with a new version of PingID Adapter 2.13. For more information, see PingID Integration Kit 2.20 (November 22, 2022).

November 14

User Verification discouraged

Improved PingID

To reduce friction to the user authentication flow, we’ve added the option to skip user verification. This feature is currently available to web users only. It will be available to Windows login users in a future version of Windows login.

November 13

Uploading / revoking OATH tokens with the PingID API

New PingID

A new endpoint (createorgtokens) has been added to the PingID API to allow you to upload a list of OATH tokens that can then be mapped to individual users.

There is also a new endpoint (revokeorgtokens) that can be used to revoke one or more OATH tokens that you previously uploaded for use.

For details, see the new sections added under OATH token management.

November 3

New version of PingID RADIUS PCV 3.0.1

New PingID Integration kit for PingFederate

A new version of PingID Integration Kit 2.19 is released with a new version of RADIUS PCV 3.0.1. For more information, see PingID Integration Kit 2.19 (November 3, 2022).

New version of PingID integration for Windows login - passwordless (version 1.3)

New PingID Integration for Windows login

October 2022

New features and improvements in PingID implemented in October

October 25

New version of PingID Mobile app 1.30

New PingID mobile app

September 2022

New features and improvements in PingID implemented in September 2022.

September 29

Added a second voice provider to improve reliability

Improved PingID

As part of the ongoing effort to improve the reliability of voice-based authentication, a second voice provider has been added for PingID.

September 15

New version of PingID Mobile app 1.29

New PingID mobile app

September 13

SMS service resiliency for Canada

Improved PingID

As part of the ongoing effort to improve the reliability of SMS-based authentication, a Canadian short code number is now being used for all SMS messages sent within Canada.

August 2022

New features and improvements in PingID implemented in August 2022.

August 31

Enforce PingOne FIDO policy for PingID

Improved PingID

You can now choose to enforce PingOne FIDO policy for PingID during authentication and registration flows.

This feature is only available for organizations that are using a PingID environment that is integrated with PingOne or created by PingOne.

Only the default PingOne FIDO policy is enforced. For information, see (Legacy) Configuring the FIDO2 security key for PingID. For information about PingOne FIDO policy, see the PingOne documentation on FIDO policies.

August 30

New version of PingID RADIUS PCV 3.0

New PingID Integration kit for PingFederate

A new version of PingID Integration Kit 2.18 is released with a new version of RADIUS PCV, which includes support for MS-CHAP v2, as well as other enhancements. For more information, see PingID Integration Kit 2.18 (August 30, 2022).

August 22

New version of PingID Integration for Windows login (version 2.8.4)

New PingID Integration for Windows login

August 2

Improved user experience for one-time passcode

Improved PingID

You can now send a push notification to your users, when requesting a one-time passcode (OTP). When the user taps the notification PingID mobile app opens automatically, and generates an OTP. For more information, see Configuring OTP push notifications.

July 2022

New features and improvements in PingID implemented in July 2022.

July 31

PingID reports - bypass expiration, mobile log support ID, failure reason

Improved PingID

  • PingID Admin Activity reports now include the expiration date of bypasses issued to users.

  • PingID Activity reports now include the support ID given to mobile device logs that were received.

  • If you have created subscriptions to PingID events, the information returned now includes the reason for an authentication failure.

July 28

New version of PingID Mobile app 1.28

New PingID mobile app

For Android changes see Mobile app 1.28 (July 28, 2022) Android.

July 17

QR Code duration

New PingID

You can now define the number of hours for which the QR code used to register a user is valid. For details, see Configuring pairing conditions.

PingID Enrollment page

Info PingID

The legacy enrollment page is now deprecated. All customers that did not upgrade earlier have been automatically migrated to the new enrollment page. All legacy settings specific to an organization’s legacy configuration are automatically applied to the new enrollment page.

July 6

New version of PingID Integration for Mac login (version 1.1.1)

New PingID Integration for Mac login

June 2022

New features and improvements in PingID implemented in June 2022.

June 28

New version of PingID integration for Windows login - passwordless (version 1.2)

New PingID Integration for Windows login

June 21

New version of PingID integration for Windows login (version 2.8.3)

New PingID Integration for Windows login

June 15

New version of PingID integration for Windows login (version 2.8.2)

New PingID Integration for Windows login

June 12

New version of PingID Mobile app 1.27

New PingID mobile app

For Android changes see Mobile app 1.27 (June 12, 2022) Android.

May 2022

New features and improvements in PingID implemented in May 2022.

May 31

New version of PingID integration for Windows login (version 2.8)

New PingID Integration for Windows login

New version of PingID Integration for Mac login (version 1.1)

New PingID Integration for Mac login

May 23

New version of PingID Mobile app 1.26

New PingID mobile app

For iOS changes see Mobile app 1.26 (May 23, 2022) iOS.

For Android changes see Mobile app 1.26 (May 23, 2022) Android.

May 2

New version of PingID Mobile app 1.25

New PingID mobile app

For iOS changes see Mobile app 1.25 (May 2, 2022) iOS.

For Android changes see Mobile app 1.25 (May 2, 2022) Android.

April 2022

New features and improvements in PingID implemented in April 2022.

April 27

New version of PingID Integration Kit 2.17

New PingID Integration kit for PingFederate

March 2022

New features and improvements in PingID implemented in March 2022.

March 23

New version of PingID Integration Kit 2.16

New PingID Integration kit for PingFederate

We’ve released a new version of the PingID Integration Kit. For details, see PingID Integration Kit 2.16 (March 23, 2022).

March 10

Set a daily limit for SMS and voice-based pairing requests

Improved PingID

It is now possible to include the number of daily SMS-based and voice-based pairing requests for a user in the limits that you set with Daily Used SMS or Voice Limit and Daily Unused SMS or Voice Limit. When you enable this option, the number of pairing requests is added to the number of authentication requests and the total cannot exceed the numbers that you set. See Configuring SMS and voice authentication for PingID.

March 7

Maximum time period for recent authentication rules extended to 90 days

Improved PingID

For the three time-related policy rules - recent authentication, recent authentication from office, recent authentication from company network - the maximum period that can be defined has been extended from 30 to 90 days.

January 2022

January 25

New version of PingID integration for Windows login (version 2.7)

New PingID Integration for Windows login

We’ve released a new version of PingID integration for Windows login. For details, see PingID integration for Windows login 2.7 (January 25, 2022).

January 11

Push/pull subscriptions now include device model and session ID data

Improved PingID

For push/pull subscriptions in PingOne for Enterprise, the data streamed now includes:

  • Device model

  • Session ID for authentication attempts. This ID can be used to combine information from the various events that are included in the streamed data, such as policy and success/failure status.

For more information on subscriptions, see Subscriptions.

December 2021

New features and improvements in PingID implemented in December 2021.

December 23

Authentication policies applied when accessing an application with a newly paired device

Improved PingID

In situations where users without a paired device attempted to access an application, the successful pairing allowed them to access the application without taking into account the authentication policies defined.

An option has now been added to require that the relevant authentication policies for the application be applied even in this scenario. To enable this requirement, select the option in the Enrollment section of the PingID configuration page (Enforce Policy evaluation after new device registration).

December 21

New version of PingID SSH Integration (version 4.2.0)

New PingID

We’ve released a new version of the PingID SSH Integration. For details, see PingID SSH Integration 4.2.0 (December 21, 2021).

December 16

Added a second SMS provider to improve reliability

Improved PingID

As part of the ongoing effort to improve the reliability of SMS-based authentication, a second SMS provider has been added for PingID.

December 9

Log in to your Windows machine without a password

New PingID Integration for Windows login

You can now log in to a Windows computer without having to enter a password, using the PingID mobile app. The authentication relies on Certificate-Based Authentication, but the user experience is similar to the familiar authentication process with the PingID mobile app.

December 1

Sender ID for SMS messages sent to Polish mobile numbers shows PINGID

Improved PingID

To reduce delivery problems, SMS messages sent to Polish mobile numbers now use PINGID as the sender ID.

November 30, 2021

Enhancements

PingID Integration for Mac login 1.0.3

For details, see PingID integration for Mac login 1.0.3 (November 30, 2021).

November 22, 2021

Enhancements

PingID API - offlinepairing: support for external authenticator apps

It is now possible to use the API’s existing offlinepairing method to facilitate the migration of users registered with an external authenticator app, so that users do not have to manually pair the authenticator app with PingID. For details, see the API documentation for offlinepairing.

November 10, 2021

Enhancements

PingID Integration Kit 2.15

For details, see PingID Integration Kit 2.15 (November 10, 2021).

November 8, 2021

Enhancements

SMS service information & privacy policy

For our user’s convenience, we’ve updated the SMS registration screen to include information about the SMS service as well as links to our privacy policy and terms and condition.

November 2, 2021

Enhancements

Web authentication policy API

You can now use the PingID API to create and update policies for web authentication. For details, see Web Authentication Policy API.

October 18, 2021

Enhancements

Accessibility improvements

As part of our ongoing efforts to improve accessibility, we’ve made some necessary updates to the PingID registration and authentication windows.

PingID Integration Kit 2.14

For details, see PingID Integration Kit 2.14 (October 18, 2021).

October 13, 2021

Resolved issues

Ticket ID Description

STAGING-13693

When using the offlinepairing API method to pair a user via a voice number that has an extension, there were cases where a 400 server error or 500 server error was returned. This issue has been resolved.

STAGING-13694

When Maximum Allowed Devices was set to 1, API requests to add a second device for the user returned error 20549 ("user already exists"), rather than the correct message, 20562 ("user.exceeded.num.of.devices"). This issue has been resolved.

September 30, 2021

Enhancements

Adding existing PingID tenant to a new PingOne environment

When creating a PingOne environment, it is now possible to connect the new environment to an existing PingID tenant.

September 22, 2021

PingID integration for Windows login (version 2.5.2)

July 28, 2021

Enhancements

Using risk level in PingID policies

It is now possible to include the risk level calculated by PingOne Protect (or a supported third-party risk service) when you define a PingID policy. MFA actions can be specified for each of the three risk levels - high, medium, and low. This feature requires version 2.11 of the PingID adapter (included in PingID Integration Kit 2.13) and a separate license for the integrated Risk service.

For more information, see Configuring a risk level rule (web policy).

PingID Integration Kit 2.13

For details, see PingID Integration Kit 2.13 (July 28, 2021).

July 13, 2021

Enhancements

PingID API - new parameter added for configuring expiration time of activation code

A new parameter, hoursUntilExpiration, has been added to the getactivationcode method to allow you to specify the number of hours the activation code should remain valid. This optional parameter can take any integer value between 1 and 336 (two weeks). If the hoursUntilExpiration parameter is not used, the activation code is valid for 48 hours.

For details, see the documentation for getactivationcode.

June 14, 2021

Resolved issues

Ticket ID Description

STAGING-12924

Due to changes made by Apple in recent versions of iOS / macOS, users authenticating with a security key on iOS / macOS are now presented with an additional dialog where they must press Continue before authenticating with the key.

June 7, 2021

Enhancements

PingID API - new parameters added for FIDO-based authentication

Two new parameters have been added to make it possible to override the default user information text that a device displays on the account selection screen.

For details, see:

June 1, 2021

Enhancements

Generation of PingID properties file

The maximum number of PingID properties files that can be generated has been increased to five.

May 26, 2021

PingID desktop app (version 1.7.2)

May 11, 2021

PingID SSH Integration (version 4.1.1)