Enabling or unlocking a user account or device
If a user account or device is locked or disabled, you can unlock or enable it from the user details page.
A user account can have one or more authentication method or device paired with the account. A user’s account can become locked, and sometimes the authentication method or device paired with the user’s account can also become locked. This section describes how to unlock a user account, and any devices paired with the account.
-
By default, a user account can be locked out if a user has more than five incorrect password attempts within 15 minutes. The actual settings for your environment are determined by the password policies assigned in your environment. Learn more in Password policies.
-
A user account and the methods and devices associated with the account might be locked because of incorrect multi-factor authentication (MFA) authorization actions, such as entering an incorrect one-time passcode (OTP) or declining push confirmations on a mobile device. The MFA policy defines the duration of the device lock.
|
If an authentication method or device is locked, PingOne shows a Locked icon in the Methods section in the relevant user’s profile. 
|
Learn more about user account lock settings in Configuring MFA settings. Learn more about MFA device settings in MFA policy.
To unlock an MFA method or device for a specific user:
Steps
-
In the PingOne admin console, go to Directory > Users and browse or search for the user you want to enable, disable, or unlock.
-
Click the toggle to enable, disable, or unlock the user account.
You can’t lock a user account manually, but you can disable it.
-
To unlock the MFA method or device for a specific user:
-
In the user list, click the user entry to open the details panel.
-
On the Services > Authentication tab, in the Methods section, locate the device you want to unlock, click the More Options icon, and then click Unlock.
-