---
title: Managing a user's devices and services
description: In environments that use multi-factor authentication (MFA), administrators can manage a user's MFA devices and service from the Users page.
component: pingone
page_id: pingone:directory:p1_manage_a_users_devices
canonical_url: https://docs.pingidentity.com/pingone/directory/p1_manage_a_users_devices.html
revdate: March 1, 2026
section_ids:
  steps: Steps
  choose-from: Choose from:
---

# Managing a user's devices and services

In environments that use multi-factor authentication (MFA) *(tooltip: \<div class="paragraph">
\<p>An electronic authentication method where a user is granted access only after presenting two or more verification factors for authentication.\</p>
\</div>)*, administrators can manage a user's MFA devices and service from the **Users** page.

You can remove a device, enable or disable a device, and bypass an authentication service. For example, you can bypass secondary authentication for a specified amount of time if a user loses or damages the MFA device that's paired with PingOne.

|   |                                                                                                                                                                                                                                                                                                             |
| - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Unpairing your last device or disabling MFA on your administrator account through the [PingOne Self-Service - MyAccount app](../user_experience/p1_self_service.html) will block your ability to authenticate. You will need another administrator to re-enable your account or assist with device pairing. |

## Steps

1. In the PingOne admin console, go to **Directory > Users** and browse or search for the user you want to edit.

2. Click the user entry to open the user details panel.

3. Click **Services** and then **Authentication**.

4. Do one or more of the following:

   ### Choose from:

   * To change the default device, in the **Methods and Devices** section, locate the appropriate authentication method. Click the **More Options (⋮)** icon and then click **Make primary**.

   * To show when the device was paired, locate the appropriate authentication method in the **Methods and Devices** section.

   * To unpair a device, in the **Methods and Devices** section, locate the appropriate authentication method. Click the **More Options (⋮)** icon and then click **Unpair**.

   * To block a device, in the **Methods and Devices** section, locate the appropriate authentication method. Click the **More Options (⋮)** icon and then click **Block**. After you block a device, the menu updates to show an **Unblock** option instead of **Block**.

   * To bypass MFA:

     * To bypass MFA for single sign-on (SSO): In the **Multi-Factor Authentication** section, click **Allow MFA bypass** and then in the **Bypass** modal, select the bypass duration and click **Bypass**.

       The bypass time remaining and a **Resume** link are shown. Click **Resume** to resume MFA for the selected user.

     * (Workforce only) To disable a specific service, in the **Integrations** section, locate the appropriate service. Click the **More Options (⋮)** icon and then click **Disable**.

     * (Workforce only) To bypass a specific service, in the **Integrations** section, locate the appropriate service. Click the **More Options (⋮)** icon and then click **Bypass**. In the list, select the duration to bypass the service. After the specified time elapses, PingOne resumes the service automatically.

   * To configure PingID settings, click **Configure Now**. Learn more about PingID settings in [PingID User Life Cycle Management](https://docs.pingidentity.com/pingid/pingid_user_life_cycle_management/pid_user_life_cycle_management.html) in the PingID documentation.

5. Click **Save**.