---
title: Configuring PingOne
description: Verify that your PingOne environment has the necessary configuration to run the PingOne for Customers Passwordless solution and enable all of the features you want to use.
component: pingone-solutions
page_id: pingone-solutions:pingone-customers-passwordless:getting_started/ciam_passwordless_configuring_p1
canonical_url: https://docs.pingidentity.com/pingone-solutions/pingone-customers-passwordless/getting_started/ciam_passwordless_configuring_p1.html
revdate: May 30, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Configuring PingOne

Verify that your PingOne environment has the necessary configuration to run the PingOne for Customers Passwordless solution and enable all of the features you want to use.

## About this task

These steps ensure that the PingOne configuration is correct and enable features such as magic links, agreements, and social sign-on.

## Steps

1. **Optional:** If you want to use magic links, verify that you have an email server and an email notification template configured in PingOne.

   Learn more about email servers in [Configuring Trusted Email Addresses](https://docs.pingidentity.com/pingone/settings/p1_configure_trusted_email.html).

   Learn more about adding and customizing notification templates in [Adding a notification](https://docs.pingidentity.com/pingone/user_experience/p1_add_notification.html) and [Editing a notification](https://docs.pingidentity.com/pingone/user_experience/p1_edit_notification.html).

   1. Go to **Settings → Sender**.

   2. On the **Email** tab, select **Ping Server**.

   3. In the **Domain** list, select your trusted email domain.

   4. Enter the sender details:

      **From Name**: Enter the name that appears as the sender's name in the email message.

      **From Address**: Select an email address from the list, or click **New** to open the **New Address** page and create a new address.

   5. Enter the reply-to details:

      **Reply-To Name**: Enter the name that appears as the reply-to name in the email message.

      **Reply-To Address**: Select an email address from the list, or click **New** to open the **New Address** page and create a new address.

   6. Click **Save**.

   7. Go to **User Experience → Notification Templates**.

   8. Verify that a notification template using the magic link exists. You can use the default **General** template or another email template.

      You must reference the magic link in the email notification template text using HTML. For example:

      ```
      <div style="display: block; text-align: center; font-family: sans-serif; border: 1px solid #c5c5c5; width: 400px; padding: 50px 30px;">
      <img class="align-self-center mb-5" src="${logoUrl}" alt="${companyName}" style="${logoStyle}"/>
           <h1>Success</h1>
           <div style="margin-top: 20px; margin-bottom:25px">
           <p> Please click the link below to confirm your email for Authentication. </p>
           <a href="${magicLink}" style="font-size: 14pt">Confirmation Link</a>
           </div>
      </div>
      ```

2. Verify that you have an multi-factor authentication (MFA) *(tooltip: \<div class="paragraph">
   \<p>An electronic authentication method where a user is granted access only after presenting two or more verification factors for authentication.\</p>
   \</div>)* policy configured in PingOne.

   For more information, see the [MFA](https://docs.pingidentity.com/pingone/authentication/p1_mfa_policies.html) documentation.

   1. In PingOne, go to **Authentication → MFA**.

   2. Click the MFA policy marked as the default and verify that its **Allowed Authentication Methods** include the authentication methods that you want to use from the following:

      * **Email**

      * **SMS**

      * **FIDO2**

3. Verify that the default population exists:

   1. Go to **Directory → Populations**.

   2. In the list of populations, verify that a population is marked as **Default**.

   3. If no existing population is marked as **Default**, select a population and click **More options (⋮) → Edit Population**.

   4. Click **Make Default Population**.

   5. Click **Switch**.

   6. Click **Save**.

4. **Optional:** If you plan to use FIDO2, verify that the default **Passkeys** policy is selected.

   For more information about FIDO policies, see the [FIDO](https://docs.pingidentity.com/pingone/authentication/p1_fido_policies.html) documentation.

   1. Go to **Authentication → FIDO**.

   2. Verify that the **Passkeys** policy is marked as the default.

   3. If the **Passkeys** policy is not the default, click **⋮ → Make Default**. then click **Save**.

5. **Optional:** If you plan to use an agreement, verify that you have an agreement configured in PingOne and copy the agreement ID.

   Learn more about configuring agreements in [Adding an agreement](https://docs.pingidentity.com/pingone/user_experience/p1_add_an_agreement.html).

   1. Go to **User Experience → Agreements**.

   2. Verify that the agreement exists and is enabled.

   3. Click the **Expand** icon for the agreement.

   4. Copy the **Agreement ID**.

   The agreement ID is used in a later procedure to configure the flows in DaVinci.

6. **Optional:** Verify that you have an external identity provider (IdP) configured in PingOne for each valid third party you want to use as a social sign-on option. Learn more about how identity providers are used in PingOne in [Identity Providers](https://docs.pingidentity.com/pingone/integrations/p1_external_idps.html).

   1. If you want to use Google as a social sign-on option, verify that Google is configured as an IdP according to the procedure in [Adding an identity provider - Google](https://docs.pingidentity.com/pingone/integrations/p1_addidentityprovidergoogle.html). During configuration, use the following property mappings.

      | Google Property | PingOne Property |
      | --------------- | ---------------- |
      | `email address` | `username`       |
      | `email address` | `email`          |
      | `family name`   | `family name`    |
      | `given name`    | `given name`     |

   2. If you want to use Facebook as a social sign-on option, verify that Facebook is configured as an IdP according to the procedure in [Adding an identity provider - Facebook](https://docs.pingidentity.com/pingone/integrations/p1_addidentityproviderfacebook.html). During configuration, use the following property mappings.

      | Facebook Property | PingOne Property |
      | ----------------- | ---------------- |
      | `email address`   | `username`       |
      | `email address`   | `email`          |
      | `family name`     | `family name`    |
      | `given name`      | `given name`     |

   3. If you want to use Apple as a social sign-on option, verify that Apple is configured as an IdP according to the procedure in [Adding an identity provider - Apple](https://docs.pingidentity.com/pingone/integrations/p1_add_idp_apple_prereqs.html). During configuration, use the following property mappings.

      | Apple Property  | PingOne Property |
      | --------------- | ---------------- |
      | `email address` | `username`       |
      | `email address` | `email`          |